<div dir="ltr"><div><div><div><div>Scott,<br></div>Thanks for the investigation here.<br><br></div>I've also been able to confirm the ` ` characters are the difference between our published document and that persisted by shibboleth SP. oXygen did a much better job than what I had previously in highlighting this, thanks for suggesting it.<br></div><div><br></div>I'll go back to our metadata code and filter the extraneous CR before signing to address this issue.<br><br></div><div>cheers,<br></div>Bradley<br><div><br><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Mar 22, 2016 at 12:36 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> Part of c14n is to normalize linefeeds (to LF), and other part is to expand<br>
> character references.<br>
<br>
</span>That's actually in the base XML spec. It's XML 1.1, but that hasn't changed, see section 2.11 of [1].<br>
<br>
You'll note that single 0D characters have to be converted to 0A. That's what happens here, so 0D 0D 0A ends up as 0A 0A (I'm guessing).<br>
<br>
The original source document has entity references in it, so if there's a bug, it may be that Xerces isn't actually converting the 0D that's in the entity reference. It's not immediately clear to me if it should be or not, but whatever it does do is apparently "correct" and consistent with the Java parser.<br>
<br>
The round trip to the backup file loses the entity references and at that point the extra 0D characters are clearly linefeed separators and are being normalized out. So they clearly aren't being normalized out during the initial parse. I'm guessing the IdP and Java code create the backup file by copying the bytes directly but I don't know for sure.<br>
<br>
I think the basic answer here is that my SP may not allow certain things to be done, more or less as a consequence of the design of the backup creation. It may be that you could use CDATA here and get it to work, but it really depends on the DOM, and I'm not sure that I preserve CDATA nodes either.<br>
<br>
It's certainly a bad idea to try and slip in extra CRs whether it's a bug or not.<br>
<br>
-- Scott<br>
<br>
[1] <a href="https://www.w3.org/TR/2004/REC-xml11-20040204/#sec-white-space" rel="noreferrer" target="_blank">https://www.w3.org/TR/2004/REC-xml11-20040204/#sec-white-space</a><br>
<div class="HOEnZb"><div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div style="font-size:11pt;margin:0cm 0cm 0.0001pt">
<font face="arial, helvetica, sans-serif"><b><span style="font-size:9pt;color:rgb(227,108,10)">Bradley Beddoes</span></b><font color="#666666"> <span style="font-size:8.5pt">| Technical Lead - Innovation, Software Development and Infrastructure<br><b>Australian Access Federation Inc</b></span></font></font></div>
<div style="margin:0cm 0cm 0.0001pt"><font face="arial, helvetica, sans-serif" color="#666666" size="1"><b><font face="arial, helvetica, sans-serif" color="#666666" size="1"><b>Web:</b> <a href="http://www.aaf.edu.au/" target="_blank">http://www.aaf.edu.au</a> | </font>Support:</b><b> </b><a href="http://support.aaf.edu.au/" target="_blank">http://support.aaf.edu.au</a></font><font face="arial, helvetica, sans-serif" color="#666666" size="1"><a href="http://www.aaf.edu.au/" target="_blank"></a></font>
</div><span style="text-align:-webkit-auto"><div style="text-align:-webkit-auto">
<span style="border-collapse:separate;border-spacing:0px"><span style="border-collapse:separate;border-spacing:0px"><div style="word-wrap:break-word"><font face="arial, helvetica, sans-serif" size="1"><div style="color:rgb(80,0,80);margin:0cm 0cm 0.0001pt">
<span style="color:rgb(127,127,127)"><br></span></div><div style="margin:0cm 0cm 0.0001pt"><font color="#999999">PRIVILEGED – PRIVATE AND CONFIDENTIAL</font></div><div style="margin:0cm 0cm 0.0001pt"><font color="#999999">This
email and any files transmitted with it are intended solely for the use
of the addressee(s) and may contain information which is confidential
or privileged. If you receive this email and you are not the
addressee(s) [or responsible for delivery of the email to the
addressee(s)], please disregard the contents of the email, delete the
email and notify the author immediately.</font></div>
</font></div></span></span></div></span><span style="font-family:arial,helvetica,sans-serif"></span></div></div></div></div></div></div></div></div></div></div>
</div>