OpenSAML user discussion

["Scott Cantor" <>]

> OK, I was able to isolate the problem to the line
>     r.verify(ks.getCertificate(alias));

The later version can't verify a signature without a reparse, it doesn't
construct the signature objects adequately when signing something. The line
doesn't help anything in the test, other than point out the bug. Somebody
could probably fix the SAMLSignedObject class to try and compensate. I have
a flag that tracks whether the signature object came from a parse or not, at
a minimum it could check the flag and throw a more understandable error.

-- Scott