From ba37031243ac7d220e21caba910d5d4a9b73405b Mon Sep 17 00:00:00 2001
From: Olav Morken <olav.morken@uninett.no>
Date: Tue, 2 Nov 2010 11:20:44 +0000
Subject: [PATCH] saml:SP: Fix decryption of NameID received in logout request.
git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2616 44740490-163a-0410-bde0-09ae8108e29a
---
modules/saml/lib/Message.php | 2 +-
modules/saml/www/sp/saml2-logout.php | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/modules/saml/lib/Message.php b/modules/saml/lib/Message.php
index 3f73f6db9..547a9f5f7 100644
--- a/modules/saml/lib/Message.php
+++ b/modules/saml/lib/Message.php
@@ -266,7 +266,7 @@ class sspmod_saml_Message {
* @param SimpleSAML_Configuration $dstMetadata The metadata of the recipient (SP).
* @return XMLSecurityKey The decryption key.
*/
- private static function getDecryptionKey(SimpleSAML_Configuration $srcMetadata,
+ public static function getDecryptionKey(SimpleSAML_Configuration $srcMetadata,
SimpleSAML_Configuration $dstMetadata) {
$sharedKey = $srcMetadata->getString('sharedkey', NULL);
diff --git a/modules/saml/www/sp/saml2-logout.php b/modules/saml/www/sp/saml2-logout.php
index bf3cb05ac..85e42f588 100644
--- a/modules/saml/www/sp/saml2-logout.php
+++ b/modules/saml/www/sp/saml2-logout.php
@@ -64,7 +64,7 @@ if ($message instanceof SAML2_LogoutResponse) {
if ($message->isNameIdEncrypted()) {
try {
- $key = self::getDecryptionKey($idpMetadata, $spMetadata);
+ $key = sspmod_saml_Message::getDecryptionKey($idpMetadata, $spMetadata);
} catch (Exception $e) {
throw new SimpleSAML_Error_Exception('Error decrypting NameID: ' . $e->getMessage());
}
--
GitLab