Skip to Content.
Sympa Menu

mace-opensaml-users - RE: [OpenSAML] XML Signature verification issue

Subject: OpenSAML user discussion

List archive

RE: [OpenSAML] XML Signature verification issue


Chronological Thread 
  • From: "Cantor, Scott E." <>
  • To: "" <>
  • Subject: RE: [OpenSAML] XML Signature verification issue
  • Date: Wed, 12 Jan 2011 21:08:57 +0000
  • Accept-language: en-US

> Well do know how to enable debug level in Java no problem.
> But i just wanted to make shure that i look for the right output.
> It was written at the INFO level while verifying signature, but
> not while signing, though there is a precalculated digest value
> in the assertion. This value is recalculated and is not correct.

The digest isn't the issue, it's what is hashed to create the digest that has
to be compared on both ends.

> The reason to this i don't know yet, but if the content has been
> changed of any reason, which it should not have been. It does
> work before i put it in the SOAP Header both signing and
> verification using a TrustEngine loading from the truststore.

There are many complex namespace issues that can create problems in a SOAP
context. Changing the document is merely one source of problems.

-- Scott




Archive powered by MHonArc 2.6.16.

Top of Page