<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">Le 29/06/2020 à 13:22, Peter Schober a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:20200629112210.srflkejiebj5663q@aco.net">
<pre class="moz-quote-pre" wrap="">* Jehan Procaccia <a class="moz-txt-link-rfc2396E" href="mailto:jehan.procaccia@tem-tsp.eu"><jehan.procaccia@tem-tsp.eu></a> [2020-06-29 08:26]:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">- EntityDescriptor 'recruitee' failed signature verification, removing from
metadata provider
Is there something I can workaround on my side or the service provider mess
something in their metadata ?
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
If the signature is incorrect then SP would have to fix the signature
(or you'd have to remove the signature validation filter, throwing any
security out the window).
You can verify the signature outside of the IDP codebase using
e.g. XmlSecTool or xmlsec1 or samlsign, cf.
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataCorrectness#MetadataCorrectness-SignatureVerification">https://wiki.shibboleth.net/confluence/display/CONCEPT/MetadataCorrectness#MetadataCorrectness-SignatureVerification</a>
-peter
</pre>
<br>
</blockquote>
<p>checking the signature with XmlSecTool does show a problem <br>
</p>
<p><i>/root/xmlsectool-1.1.5/xmlsectool.sh --verifySignature
--certificate
/var/www/html/federation/metadata/fede-imt-cert.pem --inFile
/var/www/html/federation/metadata/fede-imt-ext-recruitee-signed.xml</i></p>
<p><i></i><i>INFO XmlSecTool - Reading XML document from file
'/var/www/html/federation/metadata/fede-imt-ext-recruitee-signed.xml'</i><i><br>
</i><i>INFO XmlSecTool - XML document parsed and is well-formed.</i><i><br>
</i><i>ERROR XmlSecTool - Unknown error</i><i><br>
</i><i>java.lang<b>.StringIndexOutOfBoundsException: String index
out of range: -1</b></i><i><br>
</i><i> at java.lang.String.substring(String.java:1949)
~[na:1.6.0_41]</i><i><br>
</i><i> at java.lang.String.substring(String.java:1916)
~[na:1.6.0_41]</i><i><br>
</i><i> at
edu.internet2.middleware.security.XmlSecTool.validateSignatureReferenceUri(XmlSecTool.java:623)
~[xmlsectool-1.1.5.jar:na]</i><i><br>
</i><i> at
edu.internet2.middleware.security.XmlSecTool.validateSignatureReference(XmlSecTool.java:602)
~[xmlsectool-1.1.5.jar:na]</i><i><br>
</i><i> at
edu.internet2.middleware.security.XmlSecTool.verifySignature(XmlSecTool.java:554)
~[xmlsectool-1.1.5.jar:na]</i><i><br>
</i><i> at
edu.internet2.middleware.security.XmlSecTool.main(XmlSecTool.java:156)
~[xmlsectool-1.1.5.jar:na]</i><br>
</p>
<p>This <i>fede-imt-ext-recruitee-signed.xml </i>is just an
agregate done with aggregator-cli-0.7.0 <br>
</p>
<p><i><?xml version="1.0" encoding="UTF-8"?><md:</i><i><b>EntitiesDescriptor</b></i><i>
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
ID="607e2258-9ccd-4b45-85aa-d1846432bcec"
cacheDuration="P1DT0H0M0.000S"
validUntil="2020-12-23T12:40:49.155Z"><ds:Signature
xmlns:ds=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a>></i></p>
<p><i><md:</i><i><b>EntityDescriptor </b></i><i>xmlns:dsig=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a>
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
ID="id159317657424081159320976712" entityID="recruitee"
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"></i><i><br>
</i></p>
<p><i></md:</i><i><b>EntityDescriptor</b></i><i>></i><i><br>
</i><i></md:</i><i><b>EntitiesDescriptor</b></i><i>></i><i><br>
</i></p>
<p>but for the purpose of debuging my problem it contains only One
SP , that's the one problematic . <br>
</p>
<p>"checking" (--validateSchema) that SP metadata (MD) alone
doesn't show problems though : <br>
</p>
<p><i># ./xmlsectool.sh --validateSchema --schemaDirectory
schemaDirectory/samlschemas/ --inFile
/root/xml/fede-imt-metadata-svn/fede-imt-ext-recruitee-metadata/sp.institutminestelecom-recruitee.xml
</i><i><br>
</i><i>INFO XmlSecTool - Reading XML document from file
'/root/xml/fede-imt-metadata-svn/fede-imt-ext-recruitee-metadata/sp.institutminestelecom-recruitee.xml'</i><i><br>
</i><i>INFO XmlSecTool - XML document parsed and is well-formed.</i><i><br>
</i><i>INFO XmlSecTool - XML document is schema valid</i><br>
</p>
<p>is the trust in signature failing because of the "Federation"
aggregation signing (which I doubt beacause when I remove that
specific SP , others aggreted don't complained ) or because of
that specific SP embeded certificate/sign-keys ? <br>
</p>
<p>How can I check for that SP MD embeded signaure/certificate
(which I paste below ) .</p>
<p>thanks . <br>
</p>
<p>PS: I read from
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB/ShibbolethTrustEngine">https://wiki.shibboleth.net/confluence/display/SHIB/ShibbolethTrustEngine</a>
that there must be a match between certificate Subject and
EntityID , could it be here the pb ? <br>
</p>
<p><br>
</p>
<p><i><md:EntityDescriptor xmlns:dsig=</i><i><a
class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a></i><i>
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
ID="id159317657424081159320976712" entityID="recruitee"
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata">
</i><i><br>
</i>
<i><br>
</i><i> <ds:Signature xmlns:ds=</i><i><a
class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a></i><i>>
</i><i><br>
</i><i> <ds:SignedInfo>
</i><i><br>
</i><i> <ds:CanonicalizationMethod Algorithm=</i><i><a
class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2001/10/xml-exc-c14n#">"http://www.w3.org/2001/10/xml-exc-c14n#"</a></i><i>/>
</i><i><br>
</i><i> <ds:SignatureMethod Algorithm=</i><i><a
class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256">"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"</a></i><i>/>
</i><i><br>
</i><i> <ds:Reference
URI="#id159317657424081159320976712">
</i><i><br>
</i><i> <ds:Transforms>
</i><i><br>
</i><i> <ds:Transform Algorithm=</i><i><a
class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">"http://www.w3.org/2000/09/xmldsig#enveloped-signature"</a></i><i>/>
</i><i><br>
</i><i> <ds:Transform Algorithm=</i><i><a
class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2001/10/xml-exc-c14n#">"http://www.w3.org/2001/10/xml-exc-c14n#"</a></i><i>/>
</i><i><br>
</i><i> </ds:Transforms>
</i><i><br>
</i><i> <ds:DigestMethod Algorithm=</i><i><a
class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2001/04/xmlenc#sha256">"http://www.w3.org/2001/04/xmlenc#sha256"</a></i><i>/>
</i><i><br>
</i><i><ds:DigestValue>pd4TVQMyNzW1kXQUj5FpvgAAWEfo3+FrPtPAsLhhZyw=</ds:DigestValue>
</i><i><br>
</i><i> </ds:Reference>
</i><i><br>
</i><i> </ds:SignedInfo>
</i><i><br>
</i><i><ds:SignatureValue>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</ds:SignatureValue>
</i><i><br>
</i><i> <ds:KeyInfo>
</i><i><br>
</i><i> <ds:X509Data>
</i><i><br>
</i><i><ds:X509Certificate>MIIFzjCCA7YCCQDxXP/Xc4ZwNzANBgkqhkiG9w0BAQsFADCBqDELMAkGA1UEBhMCTkwxFjAUBgNVBAgMDU5vcnRoIEhvbGxhbmQxEjAQBgNVBAcMCUFtc3RlcmRhbTExMC8GA1UECgwoUmVjcnVpdGVlIEIuVi4gKENvbXBhbnkgbnVtYmVyIDYzODgxODI5KTEWMBQGA1UECwwNcmVjcnVpdGVlLmNvbTEiMCAGA1UEAwwZU1NPIHNpZ25hdHVyZSBjZXJ0aWZpY2F0ZTAeFw0xOTAzMDgxNDQ1NDZaFw0yOTAzMDUxNDQ1NDZaMIGoMQswCQYDVQQGEwJOTDEWMBQGA1UECAwNTm9ydGggSG9sbGFuZDESMBAGA1UEBwwJQW1zdGVyZGFtMTEwLwYDVQQKDChSZWNydWl0ZWUgQi5WLiAoQ29tcGFueSBudW1iZXIgNjM4ODE4MjkpMRYwFAYDVQQLDA1yZWNydWl0ZWUuY29tMSIwIAYDVQQDDBlTU08gc2lnbmF0dXJlIGNlcnRpZmljYXRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwpFSMWM3/uTOlJ6ghrLlfx8ng1mZ/3kO0YHr+lyswE47hEhgAaiW42CdaGZUlhzPtMYRtHbZ73bCQRRRmqf2PrsxS79fcHxgyS0fElshClnozXLIelM5m+PIJkXH3wh+7O1iyb1ZVh7pyI4Jq8NurogLXe3Jh8PQC/l8tLfCOjuh8chRGDtn88fwntVSPK4es52JC8C2BY121U8y1eda7vRvf5agso97KhjMGdTQ3W5XNNBQKOjoJPFa+e39OWCER5BgpzDvSJkXtl4lA2CVizzjCGldaMAB2m9nWKNGCspWFUNWvd2ozPO2iUUiBfMoPBXzfYoDUoonqznGN7nyY0bGjXJydmi3w5srApET5uvW0q4ygBuzUhfDX3M4hmPxiKdMFeyF7W+DiTKg6NGXByrdUTs9djd0dNuMFZXtM96V9KnH0E+acYKN+RkZMieDwM+KAVXO1Ye7+hfoXl86f12O1OBWAY9RIrqotyFJGR6/wFACaOVT/9hs9x2M0lQd1T7iMNlWweXtA/ZgerG+q3/IjPNXLoHUBW7SU+uhH3bXBkGYJ2+r3pLODBxtY+xwXPWukChVV0j7+6bc13DBxEbtmDIVBihtu0zxrlOOg+FNEosBVf8cB9bU/IJmDZDIBQQYQhVJh75Gx0FhqcOdsesQv6J+hQ6FeE2j/ZoAZPUCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAOAu4XVSJtTtCdHSyBxSu1cXOIQK6CQAmN8ximibI3/C7zxJ92//6QmzYFiDASF46KYeeDRaOg7aVGCnxOMDr6qFDY62mnA/cI8zCWpFB89cSDj9sd4Nxpv1taQi9jADDutHLk0OdqUPS0GeULpQczdJ9ilqwrZlPkRMIamzUq7UXH/CnG7V2yv1BqDU1Pu5Z+LPmEXR8DVbmGJCUwepUbvJsfU3UTjCM/4MLpolbtoPbVJprsm4gWXRSEC2MKYOSy5+Oer3cZ3g/RMCqX1DdnOn8uykuKEF7ve0z65F1bGHAkS4dK3t10QrUzsUk+hBGMDO3mVKH1jI/4GM9iIT57+Ubue+ih6nn9KrQk8JY+D52C70zhqC0bqI6oyBfMC3oXSLBeZrF74cKP9bUZs0OXaHdsNHGxg3TR2rU4ThzbJd3tu/jLL3UPnNdSUQJDJuVh6A8WkKFIoZ+448qCKdyid6lkHP6MqHLCNcWj0x/y+5BP1iN8o8BIjQjXKa2ls9KzVZZj9CI+rGJ0vicORvgD+CEdEAKgXqEj/SxIL/jBs7bHclxVUz1Lz5GLNtAdh7jbxZS2hB2anGKzc7sb29jw2ZooVvJ5wSuz95QRYFlpqufvvWtuwbD87c64yM6yqof7V7uLkltx2g6VlTxUnx2XZB5YHsLt+p2FYOuTVyYpcU=</ds:X509Certificate>
</i><i><br>
</i><i> </ds:X509Data>
</i><i><br>
</i><i> </ds:KeyInfo>
</i><i><br>
</i><i> </ds:Signature>
</i><i><br>
</i><i> <md:SPSSODescriptor AuthnRequestsSigned="true"
WantAssertionsSigned="true"
protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
</i><i><br>
</i><i> <md:KeyDescriptor use="signing">
</i><i><br>
</i><i> <dsig:KeyInfo>
</i><i><br>
</i><i> <dsig:X509Data>
</i><i><br>
</i><i><dsig:X509Certificate>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</dsig:X509Certificate>
</i><i><br>
</i><i> </dsig:X509Data>
</i><i><br>
</i><i> </dsig:KeyInfo>
</i><i><br>
</i><i> </md:KeyDescriptor>
</i><i><br>
</i><i> <md:KeyDescriptor use="encryption">
</i><i><br>
</i><i> <dsig:KeyInfo>
</i><i><br>
</i><i> <dsig:X509Data>
</i><i><br>
</i><i><dsig:X509Certificate>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</dsig:X509Certificate>
</i><i><br>
</i><i> </dsig:X509Data>
</i><i><br>
</i><i> </dsig:KeyInfo>
</i><i><br>
</i><i> </md:KeyDescriptor>
</i><i><br>
</i><i> <md:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
Location=</i><i><a class="moz-txt-link-rfc2396E"
href="https://auth.recruitee.com/sso/sp/logout/institutminestelecom">"https://auth.recruitee.com/sso/sp/logout/institutminestelecom"</a></i><i>/>
</i><i><br>
</i><i> <md:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location=</i><i><a class="moz-txt-link-rfc2396E"
href="https://auth.recruitee.com/sso/sp/logout/institutminestelecom">"https://auth.recruitee.com/sso/sp/logout/institutminestelecom"</a></i><i>/>
</i><i><br>
</i><i> <md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location=</i><i><a class="moz-txt-link-rfc2396E"
href="https://auth.recruitee.com/sso/sp/consume/institutminestelecom">"https://auth.recruitee.com/sso/sp/consume/institutminestelecom"</a></i><i>
index="0" isDefault="true"/>
</i><i><br>
</i><i> <md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
Location=</i><i><a class="moz-txt-link-rfc2396E"
href="https://auth.recruitee.com/sso/sp/consume/institutminestelecom">"https://auth.recruitee.com/sso/sp/consume/institutminestelecom"</a></i><i>
index="1"/>
</i><i><br>
</i><i> </md:SPSSODescriptor>
</i><i><br>
</i><i> <md:Organization>
</i><i><br>
</i><i> <md:OrganizationName
xml:lang="en">Recruitee</md:OrganizationName>
</i><i><br>
</i><i> <md:OrganizationDisplayName
xml:lang="en">Recruitee</md:OrganizationDisplayName>
</i><i><br>
</i><i> <md:OrganizationURL xml:lang="en"></i><i><a
class="moz-txt-link-freetext" href="https://recruitee.com">https://recruitee.com</a></i><i></md:OrganizationURL>
</i><i><br>
</i><i> </md:Organization>
</i><i><br>
</i><i> <md:ContactPerson contactType="technical">
</i><i><br>
</i><i> <md:SurName>Recruitee Support</md:SurName>
</i><i><br>
</i><i><md:EmailAddress></i><i><a
class="moz-txt-link-abbreviated"
href="mailto:support@recruitee.com">support@recruitee.com</a></i><i></md:EmailAddress>
</i><i><br>
</i><i> </md:ContactPerson>
</i><i><br>
</i><i></md:EntityDescriptor>
</i></p>
<p><br>
</p>
</body>
</html>