(no subject)

--===============0782584818==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="FL5UXtIhxfXey3p5"
Content-Disposition: inline


--FL5UXtIhxfXey3p5
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Everyone,=20

Has anyone had any issues getting SourceID 1.1 Java (acting as an SP) with =
SourceID 1.1 .NET (acting as an IDP) ? I Have!=20

more specifically, using the browser-artifact model, the Java side is calcu=
lating a different digest to that which the .net calculated for an assertio=
n.=20

Using the debug log from my java side, I can see something like the followi=
ng:=20

14:45:04,923 DEBUG [Transforms] Preform the (1)th http://www.w3.org/2001/10=
/xml-exc-c14n# transform
14:45:04,939 DEBUG [JCEMapper] Request for URI http://www.w3.org/2000/09/xm=
ldsig#sha1
14:45:04,939 DEBUG [JCEMapper] Found SHA-1 from provider SUN
14:45:04,939 DEBUG [Reference] <saml:Assertion xmln ...
14:45:04,939 WARN  [Reference] Verification failed for URI "#id3W2aGw=3D=3D"
14:45:04,939 DEBUG [Reference] unverifiedDigestValue=3D nqyL8dnPj/mW5PzfBe0=
c9DXMB/4=3D
14:45:04,939 DEBUG [Reference] calculatedDigestValue=3D ZiL8MtHF/VT8GURpBPE=
hiv8L/Mk=3D
14:45:04,939 DEBUG [Manifest] The Reference has Type=20
14:45:04,939 DEBUG [XMLUtils] signature check: Failed

Has anyone experienced anything similar when using sourceID across platform=
s like this ?=20

More information can be supplied with pleasure at any time :)=20




--=20
Robert Schonberger [email protected]
gpg key 94DA1E5C

Alan Cox wrote:
> RFC1122 also requires that your protocol stack SHOULD be able to leap tall
> buldings at a single bound of course...

And, of course my protocol stack does :) It is also a floor wax, AND a
dessert topping!-)

	- Rick Jones trying to sell his protocol stack

--FL5UXtIhxfXey3p5
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCn7QU4n/7nJTaHlwRAlgpAJwPzASo5Xy/DWYx2Jn6wh7w/p4oIwCfaCJd
6fmic7TsjMVCqhLrRBmWi68=
=b7/D
-----END PGP SIGNATURE-----

--FL5UXtIhxfXey3p5--

--===============0782584818==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
sso-users mailing list
[email protected]
http://lists.sourceid.org/mailman/listinfo/sso-users

--===============0782584818==--