Some assertions fail the signature verification

italia / spid-perl

Perl module for SPID authentication

BSD 3-Clause "New" or "Revised" License

4 stars 1 forks source link

Open alranel opened 6 years ago

alranel commented 6 years ago

Due to the following upstream bug, some assertions do not pass signature verification: https://github.com/jberger/Mojo-SAML/issues/2

spid-testenv2 generates such assertions, thus it's not currently compatible with spid-perl.

shikhaforshop commented 3 years ago

Fixed locally using different library for sign verification XML::SIG::OO and removed Mojo SAML DOM based verification