Exception when no "Conditions" element in assertions

We are currently using SourceID Liberty 2.0 beta as a Liberty Alliance=20
reference platform to test and debug Lasso, a C library we are developing=
.

We are very impressed by the quality of SourceID, but we believe that we=20
have found a small bug:

When using SourceID as a SP and Lasso as and IDP, the authentication=20
assertions generated by Lasso don't contain any "Conditions" element.

If I understand correctly SAML 1.1 documentation, "Conditions" are=20
optional in assertions. But SourceID Liberty generates a null pointer=20
exception, when it process such an assertion.

To correct this, we added a test in VerifyAssertions.java, before line 10=
9 :
ConditionsType conditionsCopy =3D=20
(ConditionsType)assertion.getConditions().copy();

so that the method "execute" returns immediately when getConditions()=20
returns null.

Best Regards,

Emmanuel Raviart

--=20
Lasso (Liberty Alliance Single Sign-On) -- http://lasso.entrouvert.org
Entr'ouvert -- www.entrouvert.com
44-46 rue de l'Ouest -- 75014 Paris -- France
T=E9l.: +33 (0)8 20 89 00 53 -- Fax : +33 (0)1 46 57 68 94