You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by "Colm O hEigeartaigh (Closed) (JIRA)" <ji...@apache.org> on 2011/10/03 11:04:37 UTC

[jira] [Closed] (WSS-3) .NET WSE signature validation of SAML Assertion throws exception

     [ https://issues.apache.org/jira/browse/WSS-3?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh closed WSS-3.
---------------------------------

    
> .NET WSE signature validation of SAML Assertion throws exception
> ----------------------------------------------------------------
>
>                 Key: WSS-3
>                 URL: https://issues.apache.org/jira/browse/WSS-3
>             Project: WSS4J
>          Issue Type: Improvement
>         Environment: Windows XP, .Net 2003 WSE 2.0 
>            Reporter: Ted X Toth
>         Attachments: WSSecurityUtil.diff, WSSignEnvelope.diff
>
>
> The .NET WSE SecurityInputFilter throws a signature validation exception when checking the signature of a SAML Assertion. The exception occurs because the filter uses the signature reference to look up the assertion by its AssertionID and  the look up fails because wss4j assumes the lookup is done on the wsu:Id. The purposed solution is to make the wsu:Id the same as the AssertionId.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org