ipsilon

#549 Recovered: SAMLv2: WantAuthnRequestsSigned = true
Closed: Fixed by t0xic0der. Opened by t0xic0der.

Closed: Fixed
Reopen Issue

Ipsilon barfs (400 bad request) unless the AuthnRequest is signed, so that should be indicated in the metadata.

WantAuthnRequestsSigned = true

(see line 687, sec 2.4.3 of http://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf )

Alternatively, that should be a configuration item whether or not signed requests are required.

In debug mode, an unsigned request gets the following error:

DEBUG(ipsilon/providers/common.py:50 InvalidRequest.__init__()): Invalid SAML Request: <lasso.Samlp2AuthnRequest object at 0x7f8f25806cd0> (DsSignatureNotFoundError() [u'PHN.....(snip)...dD4='])

This issue ticket was originally removed from the tracker as it clashed with the pull request.
See upstream ticket for migration details.

Metadata Update from @t0xic0der:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.