openstack/deb-python-pysaml2
Code Issues Proposed changes

Do NOT collect signature cert from the authn request and use for encryption.

Browse Source
This commit is contained in:
Hans Hörberg
2015-05-25 15:32:31 +02:00
parent e2b0461247
commit b6c8938e7d
1 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
src/saml2/sigver.py
View File

@@ -1070,17 +1070,17 @@ def encrypt_cert_from_item(item):
[pefim, ds]) [pefim, ds])
if len(_elem) == 1: if len(_elem) == 1:
_encrypt_cert = _elem[0].x509_data[0].x509_certificate.text _encrypt_cert = _elem[0].x509_data[0].x509_certificate.text
else: #else:
certs = cert_from_instance(item) # certs = cert_from_instance(item)
if len(certs) > 0: # if len(certs) > 0:
_encrypt_cert = certs[0] # _encrypt_cert = certs[0]
except Exception: except Exception:
pass pass
if _encrypt_cert is None: #if _encrypt_cert is None:
certs = cert_from_instance(item) # certs = cert_from_instance(item)
if len(certs) > 0: # if len(certs) > 0:
_encrypt_cert = certs[0] # _encrypt_cert = certs[0]
if _encrypt_cert is not None: if _encrypt_cert is not None:
if _encrypt_cert.find("-----BEGIN CERTIFICATE-----\n") == -1: if _encrypt_cert.find("-----BEGIN CERTIFICATE-----\n") == -1: