Skip to content

Canonicalization method not permitted when signing metadata.xml #42

@timlegge

Description

@timlegge

<dsig:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments" />

in http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf that

Signatures in SAML metadata SHOULD NOT contain transforms other than the enveloped signature
transform (with the identifier http://www.w3.org/2000/09/xmldsig#enveloped-signature) or the exclusive
canonicalization transforms (with the identifier http://www.w3.org/2001/10/xml-exc-c14n# or
http://www.w3.org/2001/10/xml-exc-c14n#WithComments).

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions