[xmlsec] Verifing signature of SAML XML artifacts that has an ID attribute in it, but I think I should ignore it

Aleksey Sanin aleksey at aleksey.com
Tue May 22 14:36:36 PDT 2007


> So, in my state of ignorance, if xmlsec could ignore the ID attribute,
> then the existence of the ID attribute will not cause the xpointer
> error and the data will match the digest.

You can not ignore the ID attribute because it is used to search
the piece of the XML you want to sign...

If you load xml file yourself, then you might try to use xmlAddID()
function (search xmlsec command line utility source code for an
example).


Aleksey



More information about the xmlsec mailing list