search

aerialship / SamlSPBundle

SAML 2.0 Symfony SP Bundle - new version available at
http://www.lightsaml.com/SP-Bundle/
MIT License
63 stars 43 forks source link

Sign AuthnRequest #53

Closed metfan closed 10 years ago

metfan commented 10 years ago

Hello,

It's seems AuthnRequest sent to idp is not signed. My idp Manager report me there are no signing key neither algorithm use.

Is there special configuration to use this feature?

This is my security.yml: services: acme: idp: file: "@ACMESecurityBundle/Resources/idp-FederationMetadata.xml" sp: config: entity_id: http://acme.dev want_assertions_signed: true signing: cert_file: "@ACMESecurityBundle/Resources/saml-sp.crt" key_file: "@ACMESecurityBundle/Resources/saml-sp.pem"

thanks for your help

mattattui commented 10 years ago

Same issue here (and same config). Any clues?

mattattui commented 10 years ago

Right, figured it out. If you don't specify a key_pass value it fails ("" and ~ don't count). This is because a little-known quirk of PHP isset() on array keys is that it will return false if the key exists but has no value. I'll submit a pull request with a fix.