OpenSAML user discussion

["Scott Cantor" <>]

> What do you mean by passing the input source to OpenSAML? 

I mean any time you parse any XML that you expect to pass into OpenSAML, you
have to get the parser object from XML.ParserPool first. Failing to do that
will result in random crashes if data is invalid and almost certainly
signature verification failures.

In this case, the parser object is bogus, it wasn't even namespace aware. If
you want to configure your own parser, you can do it at your own risk, but
there are many properties you have to set.

> The OpenSAML parser engine is XML.ParserPool, isn't it?

Yes, which you're *not* using in your sample code, that's the bug. There are
shortcut methods for parsing from any type of standard input source.

-- Scott