You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by Nick Sydenham <ns...@yahoo.co.uk> on 2004/11/19 17:14:53 UTC

Broken OfflineResolver and VerifySignature samples

These two sample classes appear to be broken when trying to verify a 
signature that doesn't have an optional URI attribute on the Reference 
element.

In OfflineResolver.engineCanResolve the first java statement (line 98) 
should be:

if (uri == null) {
	return false;
}

However, adding this line means that you then get an 
"XMLSignatureException: The Reference for URI  has no XMLSignatureInput" 
exception when the VerifySignature sample is run.

Therefore, is the bug in the VerifySignature sample or the base library 
trying to check for URI's that don't exist?