Re: Problem verifying SAML response signature with xmlsec API

Aleksey Sanin <[email protected]> Thu, 7 Nov 2019 13:24:08 -0800
Newsgroups gmane.text.xml.xmlsec
Message-ID <[email protected]>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