Skip to Content.
Sympa Menu

shibboleth-dev - Re: [Shib-Dev] Shibboleth 2.0 IdP xml digital signature

Subject: Shibboleth Developers

List archive

Re: [Shib-Dev] Shibboleth 2.0 IdP xml digital signature


Chronological Thread 
  • From: Chad La Joie <>
  • To:
  • Subject: Re: [Shib-Dev] Shibboleth 2.0 IdP xml digital signature
  • Date: Thu, 30 Oct 2008 11:19:38 +0100
  • Openpgp: id=146B2514
  • Organization: SWITCH

Yeah, it would. And it will occur whether you use a front-channel
attribute-push or back-channel attribute query.

Kristof BAJNOK wrote:
> On Thursday 30 October 2008 Kristof BAJNOK wrote:
>> I can confirm that something screws up the Response before it gets base64
>> encoded when Tomcat is started with POSIX locale. Even Shib SP fails when
>> the Assertion is not encrypted. (Although it works fine with
>> EncryptedAssertion)
>
> It's happening after signing (and optionally encryption), that's why it
> seemed to be a signature problem. It's indeed a base64 (transfer encoding)
> problem. This would result in mangled attribute values if no signature
> validation took place.
>
> Kristof

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
,
http://www.switch.ch




Archive powered by MHonArc 2.6.16.

Top of Page