Skip to main content
Phillip Hayes a posé une question dans #Security
The ID it is having trouble with is the ID of the assertion itself.  The certificates match up as expected, but seem to fail on the signature validation

 

Here is the out put of the validator:

 

Unexpected Exceptions

 

  Ok

 

1. Validating the Status

 

  Ok

 

2. Looking for an Authentication Statement

 

  Ok

 

3. Looking for a Conditions statement

 

  Ok

 

4. Checking that the timestamps in the assertion are valid

 

  Ok

 

5. Checking that the Attribute namespace matches, if provided

 

  Ok

 

6. Miscellaneous format confirmations

 

  Ok

 

7. Confirming Issuer matches

 

  Ok

 

8. Confirming a Subject Confirmation was provided and contains valid timestamps

 

  Ok

 

9. Checking that the Audience matches, if provided

 

  Ok

 

10. Checking the Recipient

 

  Ok

 

  Organization Id that we expected: 00Di0000000JZZz

 

  Organization Id that we found based on your assertion: 00Di0000000JZZz

 

11. Validating the Signature

 

  Is the response signed? false

 

  Is the assertion signed? true

 

  Is the correct certificate supplied in the keyinfo? true

 

  An exception was thrown on signature validation: javax.xml.crypto.URIReferenceException: org.apache.xml.security.utils.resolver.ResourceResolverException: Cannot resolve element with ID s2692fee7502e9df6386d0246adc9597e378d11073

 

  Certificate specified in settings: CN=sso-stage.hhsidentity.hhs.gov, OU=hhsidentity, O=HHS, L=Bethesda, ST=Maryland, C=US Expiration: 6 Jul 2014 23:02:40 GMT

 

  Certificate specified in this assertion: CN=sso-stage.hhsidentity.hhs.gov, OU=hhsidentity, O=HHS, L=Bethesda, ST=Maryland, C=US Expiration: 6 Jul 2014 23:02:40 GMT

 

12. Checking that the Site URL Attribute contains a valid site url, if provided

 

  Not Provided

 

13. Looking for portal and organization id, if provided

 

  Not Provided

 

14. Checking if session security level is valid, if provided

 

  Ok
1 réponse
0/9000