OpenSAML user discussion

[Brent Putman <>]

Scott Cantor wrote:

soon.  Do you (or anyone) have or know of any good test vector data with
which to test the simple signing (non-XML signature) use cases?  Known
good test data for both the HTTP-Redirect DEFLATE and the draft
HTTP-POST-SimpleSign bindings would be of use, e.g. the encoded/signed
query string or POST form, and associated key/key pair used for
signing.  I don't trust our encoders (yet) to generate the stuff to test
the validation...  :-)
    

You could verify your encoder output against this:

http://rnd.feide.no/saml2debug/
  

Thanks, that's great.

As far as signature test data is concerned, you could use the SP to generate
something, it's been tested a few different times and is known to be
correct.
  

Ok, I had thought about pursuing that as one option, if you trust it enough.  :-)