Skip to Content.
Sympa Menu

mace-opensaml-users - SAML signature validation

Subject: OpenSAML user discussion

List archive

SAML signature validation


Chronological Thread 
  • From: murali mca <>
  • To:
  • Subject: SAML signature validation
  • Date: Thu, 19 Nov 2009 04:44:12 +0530 (IST)
  • Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.co.in; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=evbnwd+j3z8bJBaW8GLMFBg7IFazTVqDJt2qIaqHGbCthlDUQBJ6WnacHDU20WBj3a4KIi/9n94lth14TmIF4F8LwJCUbH4nGudAOwxvXTW1iBCnEKjhLc2hM2TvuD8ihAHAOCylsuYDjfhLZFtfAPrTDnWRt2xAqaZkNNy2McE=;

Hi,
 
I am using the below code fragment to verify the signature in SAML and getting the error. Can someone help me to find the reason for this error?
 
 Signature signatureToValidate = assertion.getSignature();
 SAMLSignatureProfileValidator profileValidator = new SAMLSignatureProfileValidator();
 try {
     profileValidator.validate(signatureToValidate);
 } catch (ValidationException ve) {
     ve.printStackTrace();
 }
 
Error:

18-Nov-2009 22:40:17 org.opensaml.security.SAMLSignatureProfileValidator validateTransforms
SEVERE: Signature was missing the required Enveloped signature transform
org.opensaml.xml.validation.ValidationException: Transforms did not contain the required enveloped transform
        at org.opensaml.security.SAMLSignatureProfileValidator.validateTransforms(SAMLSignatureProfileValidator.java:198
)
        at org.opensaml.security.SAMLSignatureProfileValidator.validateSignatureImpl(SAMLSignatureProfileValidator.java:
83)
        at org.opensaml.security.SAMLSignatureProfileValidator.validate(SAMLSignatureProfileValidator.java:52)
        at org.apache.jsp.service_005fprovider_jsp._jspService(service_005fprovider_jsp.java:191)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:98)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
        at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:331)
        at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:329)
        at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:265)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:873)
        at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java
:665)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528)
        at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
        at java.lang.Thread.run(Thread.java:619)

 
 
Thanks
Murali




Connect more, do more and share more with Yahoo! India Mail. Learn more.


Archive powered by MHonArc 2.6.16.

Top of Page