Hi, I see an error message from you stack trace which says "error=45:key is not found:" Do you have the keys placed under /SAMLTestTool/Keys ?
If you have changed the location of your keys, you will have to modify the path here: http://code.google.com/p/google-apps-sso-sample/source/browse/trunk/php/SAMLTestTool/process_response.php#194 -anirudh On Jul 16, 12:13 am, Sheva <[EMAIL PROTECTED]> wrote: > Hello, I have some problems. I use SAMLTestTool. Generate SAML > response and get this in saml-response- > lafcdclokbggnfoghcdnllijcfeaockjdamhcifn.xml > > <samlp:Response ID="okajkkhbmcepmodebgpndcbgnndcfioecoomjfof" > IssueInstant="2008-07-15T19:05:42Z" Version="2.0" > Destination="https://www.google.com/a/psosamldemo.net/acs" > InResponseTo="kdpecgdoeadhglipcbeocnekkdbcdogobfcdlfca" > xmlns="urn:oasis:names:tc:SAML:2.0:assertion" > xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" > xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"> > <Signature xmlns="http://www.w3.org/2000/09/xmldsig#"> > <SignedInfo> > <CanonicalizationMethod Algorithm="http://www.w3.org/TR/ > 2001/REC-xml-c14n-20010315#WithComments" /> > <SignatureMethod Algorithm="http://www.w3.org/2000/09/ > xmldsig#dsa-sha1" /> > <Reference URI=""> > <Transforms> > <Transform Algorithm="http://www.w3.org/2000/09/ > xmldsig#enveloped-signature" /> > </Transforms> > <DigestMethod Algorithm="http://www.w3.org/2000/09/ > xmldsig#sha1" /> > <DigestValue></DigestValue> > </Reference> > </SignedInfo> > <SignatureValue></SignatureValue> > <KeyInfo> > <KeyValue></KeyValue> > </KeyInfo> > </Signature> > <samlp:Status> > <samlp:StatusCode Value="urn:oasis:names:tc:SAML: > 2.0:status:Success"/> > </samlp:Status> > <Assertion ID="hdfebijdoiackcjipnkffjjiihfbnehfhnjjgcme" > IssueInstant="2008-07-15T19:05:42Z" Version="2.0" > xmlns="urn:oasis:names:tc:SAML:2.0:assertion"> > <Issuer>psosamldemo.net</Issuer> > <Subject> > <NameID > Format="urn:oasis:names:tc:SAML: > 1.1:nameid-format:emailAddress"> > demouser > </NameID> > <SubjectConfirmation > Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"> > <SubjectConfirmationData > > Recipient="https://www.google.com/a/psosamldemo.net/acs" > > NotOnOrAfter="2008-07-15T19:15:42Z" > > InResponseTo="kdpecgdoeadhglipcbeocnekkdbcdogobfcdlfca"/> > </SubjectConfirmation> > </Subject> > <Conditions NotBefore="2008-07-15T19:00:42Z" > NotOnOrAfter="2008-07-15T19:15:42Z"> > <AudienceRestriction> > <Audience>https://www.google.com/a/ > psosamldemo.net/acs</Audience> > </AudienceRestriction> > </Conditions> > <AuthnStatement AuthnInstant="2008-07-15T19:05:42Z"> > <AuthnContext> > <AuthnContextClassRef> > urn:oasis:names:tc:SAML: > 2.0:ac:classes:Password > </AuthnContextClassRef> > </AuthnContext> > </AuthnStatement> > </Assertion> > </samlp:Response> > > After that, sign it, but have error > > func=xmlSecKeysMngrGetKey:file=keys.c:line=1364:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec > library function failed: > func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=871:obj=unknown:subj=unknown:error=45:key > is not found: > func=xmlSecDSigCtxProcessSignatureNode:file=xmldsig.c:line=565:obj=unknown:subj=xmlSecDSigCtxProcessKeyInfoNode:error=1:xmlsec > library function failed: > func=xmlSecDSigCtxSign:file=xmldsig.c:line=303:obj=unknown:subj=xmlSecDSigCtxSigantureProcessNode:error=1:xmlsec > library function failed: > Error: signature failed > Error: failed to sign file "/SAMLTestTool/saml-response- > lafcdclokbggnfoghcdnllijcfeaockjdamhcifn.xml" --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google Apps APIs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/google-apps-apis?hl=en -~----------~----~----~----~------~----~------~--~---
