SAML2: Ignore signature validation exceptions.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1624 44740490-163a-0410-bde0-09ae8108e29a

lib/SAML2/Message.php

@@ -147,13 +147,19 @@ abstract class SAML2_Message implements SAML2_SignedElement {
 
 
 		/* Validate the signature element of the message. */
-		$sig = SAML2_Utils::validateElement($xml);
-		if ($sig !== FALSE) {
-			$this->certificates = $sig['Certificates'];
-			$this->validators[] = array(
-				'Function' => array('SAML2_Utils', 'validateSignature'),
-				'Data' => $sig,
-				);
+		try {
+			$sig = SAML2_Utils::validateElement($xml);
+
+			if ($sig !== FALSE) {
+				$this->certificates = $sig['Certificates'];
+				$this->validators[] = array(
+					'Function' => array('SAML2_Utils', 'validateSignature'),
+					'Data' => $sig,
+					);
+			}
+
+		} catch (Exception $e) {
+			/* Ignore signature validation errors. */
 		}
 
 	}