[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-dev
Subject:    RE: Problems with validating signatures in OpenSAML 3.0
From:       Lasse_Højgaard <lash () stibosystems ! com>
Date:       2016-09-14 8:58:40
Message-ID: HE1PR01MB1900208A33B797AB1797487BB6F10 () HE1PR01MB1900 ! eurprd01 ! prod ! exchangelabs ! com
[Download RAW message or body]

For future reference: I have successfully validated the signatures.

I fixed the problem like so:

final ClassLoader originalClassLoader = Thread.currentThread().getContextClassLoader();
// for circumventing OSGi classloader
Thread.currentThread().setContextClassLoader(MyClass.class.getClassLoader());
try {
	// blah blah
	valid = signatureTrustEngine.validate(assertion.getSignature(), criteriaSet);
} catch (xxxx e) {

} finally {
	// restore original OSGi classloader
	Thread.currentThread().setContextClassLoader(originalClassLoader);
}

Thank you everybody for your support.

Lasse Højgaard
Consultant


> -----Original Message-----
> From: dev [mailto:dev-bounces@shibboleth.net] On Behalf Of Lasse
> Højgaard
> Sent: 14. september 2016 10:13
> To: Shib Dev
> Subject: RE: Problems with validating signatures in OpenSAML 3.0
> 
> Hi again,
> 
> It's occurred to me, that this may be related to the OSGi structure, of my
> code.
> Basically I'm implementing an SAML SSO extension to an OSGi application.
> I've found a few links that says, that using the Service API in OSGi application
> may cause trouble.
> How to utilize ServiceLoader in OSGi:
> http://blog.osgi.org/2013/02/javautilserviceloader-in-osgi.html
> 
> Also found this wrapper library for OpenSAML, that wraps it in an OSGi
> bundle.
> https://mvnrepository.com/artifact/org.apache.servicemix.bundles/org.apa
> che.servicemix.bundles.opensaml
> Haven't switch my dependencies to it yet, but considering it.
> 
> Have anybody experienced similar problems in OSGi applications?
> 
> --
> Lasse Højgaard
> Consultant
> 
> 
> 
> --
> To unsubscribe from this list send an email to dev-
> unsubscribe@shibboleth.net
-- 
To unsubscribe from this list send an email to dev-unsubscribe@shibboleth.net
[prev in list] [next in list] [prev in thread] [next in thread]