[OpenSAML] XML Signature issue in openSAML1.1

[bharath.k...@rsa.com]

I am using openSAML1.1 for generating SAML 1.0 assertions and signing
it. I realised that openSAML1.1 by default uses
http://www.w3.org/2001/10/xml-exc-c14n# algorithm for canonicalization.
Since XML canonicalization is used, inserted a space between two
elements in a signed assertion and with this signature validation
started failing. Why is the signature validation failing ?? According to
my undersatnding a space between two XML elements shouldn't have
contributed to the digest value when canonicalization is used. If this
is a known issue, is it fixed in opensaml 2.X ??

Thanks,
Bharath

[Chad La Joie]

Whitespace breaks signatures. It's not a bug of the library. Also,
OpenSAML 1.1 is dead and no longer supported.

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
chad....@switch.ch, http://www.switch.ch

[Bernd Zwattendorfer]

Hi,

is there any possibility to report bugs in OpenSAML (not only this list)?
The method validateAttributeConsumingServices(SPSSODescriptor
spssoDescriptor) in SPSSODescriptorSchemaValidator requires at least one
AttributeConsumingService which is against the SAML metadata
specification and schema.

Best regards,
Bernd

[Chad La Joie]

https://bugs.internet2.edu/jira

--