OpenSAML user discussion

[Chris Card <>]

Hi,

I'm writing some test code to generate a SAML Response containing a signed Assertion, using the OpenSAML C++ library.

Currently my code looks like this:

            // Sign Assertion

            assertionDom = assertion->marshall(static_cast<DOMDocument*>(0), &signatures);
            // Add Assertion to Response
            response->getAssertions().push_back(assertion);
            responseDom = response->marshall(static_cast<DOMDocument*>(0));

which does produce xml which appears to have a signature in the right place, but when I try to validate the response I get the error
"Digital signature does not validate with the supplied key.".

Before I investigate other things, is the above the correct way to produce a signed Assertion within a Response?

Chris