I saw mails from last August suggesting you can't verify a signature once you've loaded a doc into XMLBeans:

ResponseDocument responseDocument = ResponseDocument.Factory.parse (samlResponse);
ResponseType responseType = responseDocument.getResponse();

CertificateFactory certFactory = CertificateFactory.getInstance("x. 509"); ByteArrayInputStream certByteStream = new ByteArrayInputStream (x509CertBytes[cc]); X509Certificate x509Cert = (X509Certificate) certFactory.generateCertificate(certByteStream);
certByteStream.close();

SignatureType sigType = responseType.getSignature();
XMLSignature sig = new XMLSignature((Element)sigType.getDomNode(), "");
sig.checkSignatureValue(x509Cert);

always fails to verify the signature. I heard something about XMLBeans not adding prefixes when loading from file.

Is this still the case or is there something I can use in XmlOptions when loading?

thanks,

Alistair


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to