OpenSAML user discussion

["Scott Cantor" <>]

> [Pantvaidya, Vishwajit] Attaching the log I got by turning debug on for
the
> digester on the validation side.

You have to compare the two sides.

> I see only the assertion signature and its
> digest but not the response signature and its digest in the messages.

The response digest can't contain the response signature for reasons that
should be fairly clear. It doesn't get far enough to compute the signature
because the reference already failed.

-- Scott