[ http://issues.apache.org/jira/browse/WSFX-51?page=all ]

Ted X Toth updated WSFX-51:
---------------------------

    Attachment: WSSecurityUtil.diff

I added deprecated versions ofsome methods to make wss4j-1.0 backwards 
compatible.

> .NET WSE signature validation of SAML Assertion throws exception
> ----------------------------------------------------------------
>
>          Key: WSFX-51
>          URL: http://issues.apache.org/jira/browse/WSFX-51
>      Project: WSFX
>         Type: Improvement
>   Components: WSS4J
>  Environment: Windows XP, .Net 2003 WSE 2.0 
>     Reporter: Ted X Toth
>  Attachments: WSSecurityUtil.diff, WSSignEnvelope.diff
>
> The .NET WSE SecurityInputFilter throws a signature validation exception when 
> checking the signature of a SAML Assertion. The exception occurs because the 
> filter uses the signature reference to look up the assertion by its 
> AssertionID and  the look up fails because wss4j assumes the lookup is done 
> on the wsu:Id. The purposed solution is to make the wsu:Id the same as the 
> AssertionId.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira

Reply via email to