trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

providers/saml: fix X509Data container linebreaks

This commit is contained in:
Jens Langhammer 2020-08-01 19:38:59 +02:00
parent 330bd0932b
commit 1a6dd00681
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
passbook/providers/saml/processors/assertion.py
View File

@ -5,7 +5,7 @@ from types import GeneratorType
from django.http import HttpRequest from django.http import HttpRequest
from lxml import etree # nosec from lxml import etree # nosec
from lxml.etree import Element, SubElement # nosec from lxml.etree import Element, SubElement # nosec
from signxml import XMLSigner, XMLVerifier from signxml import XMLSigner, XMLVerifier, strip_pem_header
from structlog import get_logger from structlog import get_logger
from passbook.core.exceptions import PropertyMappingExpressionException from passbook.core.exceptions import PropertyMappingExpressionException
@ -228,14 +228,15 @@ class AssertionProcessor:
signature_algorithm=self.provider.signature_algorithm, signature_algorithm=self.provider.signature_algorithm,
digest_algorithm=self.provider.digest_algorithm, digest_algorithm=self.provider.digest_algorithm,
) )
x509_data = strip_pem_header(
self.provider.signing_kp.certificate_data
).replace("\n", "")
signed = signer.sign( signed = signer.sign(
root_response, root_response,
key=self.provider.signing_kp.private_key, key=self.provider.signing_kp.private_key,
cert=[self.provider.signing_kp.certificate_data], cert=[x509_data],
reference_uri=self._assertion_id, reference_uri=self._assertion_id,
) )
XMLVerifier().verify( XMLVerifier().verify(signed, x509_cert=x509_data)
signed, x509_cert=self.provider.signing_kp.certificate_data
)
return etree.tostring(signed).decode("utf-8") # nosec return etree.tostring(signed).decode("utf-8") # nosec
return etree.tostring(root_response).decode("utf-8") # nosec return etree.tostring(root_response).decode("utf-8") # nosec