OpenSAML user discussion

[Deena Gurajala <>]

Hi Scott,

I figured it out the problem. The way I am adding the Key confirmation data is wrong. I did some search (One of old thread in the same forum) and was able to figure it out the correct way.

Thank you for your response though.

--Deena.

On Tue, Jul 28, 2009 at 1:47 PM, Deena Gurajala <> wrote:

Hi Scott,

I am sorry for my bad English. But can you give me direction to add Holder of key confirmation data to an Authentication request? Because the signature verification is failing only when I add Subject confirmation Data to the request. Otherwise it is working fine.

On Tue, Jul 28, 2009 at 12:54 PM, Scott Cantor <> wrote:

> I am trying to create an AuthenticationRequest with openSAML. this request
> is signed using client private key and contains Holder-of-Key.

Holder of Key is a term related to assertion subject confirmation, not
requests.

> I am able to
> generate the request but signature validation is failing on other side.

That's not something that can be debugged looking at code, you have to log
the octets being digested by the xmlsec library and compare them to see
what's different and where the problem's coming from.

-- Scott