OpenSAML user discussion

[Asa Hardcastle <>]

Exactly what I am cloning, an Assertion, and an Encrypted assertion.    
I am ooto today, kids have the day off, but I'll tell you how it goes  
when I get a chance to get into this tonight.   So far it appears that  
deep cloning starting from the unmarshalled object is ok.  I have made  
no modifications to the original, except to extract the EPR (with sec  
token) from a SOAP envelope via xmltooling - so the DOM is probably  
still intact, no?

gracias señor

asa

--
Asa Hardcastle, Technical Lead, openLiberty ID-WSF ClientLib
Tel: +1.413.429.1044 Skype: subsystem7

On Feb 18, 2008, at 11:08 PM, Scott Cantor wrote:

> > > Is there a better or prescribed way? Are there any negative side-
> > > effects (besides performance) to the approach above?
>
> I forgot to add...it's actually fairly important that a clone  
> operation
> *try* to do so using the DOM + unmarshall sequence because if the  
> object is
> signed, the chances of preserving signature integrity are 100% that  
> way vs.
> something quite a bit less than 100% with an actual deep copy of  
> only the
> objects around the DOM.
>
> So if you were, for example, trying to clone an assertion (which you  
> will if
> you're not already), you'd have to do it this way anyway (whether by  
> hand or
> calling some method that internally just did the same thing).
>
> -- Scott