OpenSAML user discussion

["Ender Wiggin" <>]

Hello,

I need to sign a saml assertion with a digital certificate. I am bit new to this and was wondering if someone can point me to a code sample that I can reference. Alternatively, I have pasted below what I have come up with thus, but I am not sure if the manner in which I am getting the public and private keys is correct.

Any suggestions would be greatly appreciated.

Thanks

SignatureBuilder sigBuilder  = (SignatureBuilder)builderFactory.getBuilder(Signature.DEFAULT_ELEMENT_NAME);
           Signature signature = sigBuilder.buildObject();

KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
String ksName = res.getString("KEYSTORE");
FileInputStream ksfis = new FileInputStream(ksName);
BufferedInputStream ksbufin = new BufferedInputStream(ksfis); 
               
String ksPassword = res.getString("KEYSTORE_PSWD");
String ksPrivAlias = res.getString("KEYSTORE_PRIVKEY_ALIAS");

               ks.load(ksbufin, ksPassword.toCharArray()); 
               
               Certificate cert = ks.getCertificate(ksPrivAlias);
                                            
               PublicKey pubKey = cert.getPublicKey();

               KeyPair kp = SecurityTestHelper.generateKeyPair("RSA", 1024, null);
              
               Credential signingCred = SecurityHelper.getSimpleCredential(pubKey, kp.getPrivate());

signature.setSigningCredential(signingCred);                     signature.setCanonicalizationAlgorithm(SignatureConstants.ALGO_ID_C14N_EXCL_OMIT_COMMENTS); signature.setSignatureAlgorithm(SignatureConstants.ALGO_ID_SIGNATURE_RSA_SHA1);