OpenSAML user discussion

["Scott Cantor" <>]

> Test 1 is my own code. Test 2 was copied from WSS4J test 
> code, test\wssec\TestWSSecurityST2.java. Both are triggered 
> during the WSSignEnvelope.build call because I logged the 
> SAMLAssertion before doing the sign. If I log the assertion, 
> I get the null pointer exception because root is null so 
> assertion is null and it is not dirty. If I do not log the 
> assertion, I do not get the exception.

I don't see any way for this to happen. But leaving that aside, you want to
take better care of the document situation. If you want to log it and you
know you're going to pump it into an existing document later, then use
toDOM() up front with that document and then print it. Then it won't have to
play games with the DOM later.

> // This is what sets up the situation for the null pointer exception.
> // If I comment out this line, I won't get the exception.
>     System.out.println(assertion);

Call toDOM(envelope.getBody().getOwnerDocument()) first.

That said, I still don't see any way for that specific error to happen. I'd
have to look into it, and without any experience with WSS4J, I really don't
have time. If you figure out what the actual bug is, I'll fix it (assuming
it's mine and not theirs).

-- Scott