OpenSAML user discussion

[Jean-Noel Colin <>]

Scott

You are right. I'm trying to access the KeyInfo right after signing  
the assertion. It was only for testing, no real use case for that.

Thanks for your answer

Jean-Noel

On 04 Oct 2005, at 17:06, Scott Cantor wrote:

> > Is this a bug or am I missing something?
>
> My guess is you're attempting to pull the certificate back out  
> immediately
> after signing it, which exposes the fact that XML security does not  
> populate
> the KeyInfo object inside the signature unless the signature is parsed
> directly, not when it's actually created.
>
> I could have used the same hack I use up above in the verify method  
> to get
> it to populare a local KeyInfo object using the raw XML, but I  
> didn't see
> much of a use case for this method by the signer.
>
> -- Scott