OpenSAML user discussion

[Tom Delorenzi <>]

Unfortunately both sides of the picture here are new development and so 
neither is known to be good :) 

-----Original Message-----
From: Scott Cantor 
[mailto:]
 
Sent: Thursday, March 04, 2010 2:02 PM
To: 

Subject: RE: [OpenSAML] Validating signatures, a way to verify?

> I have completed my saml code which talks to a responder, gets an
assertion
> and validates the signature. Im rejecting the signature(which is 
> coming
from
> a test perl script). Is there some easy way to verify if my code is
working
> right? Any way to feed myself a pre-canned response or something that 
> I
know
> 100% is valid?

Normally you need to determine if the instance that's failing is valid in a 
known working implementation and then you'll know if it's your code, theirs, 
or the transport. There are exhaustive threads on this in the archive.

-- Scott