Vista and XP Cardspace issues

Early versions of Cardspace, such as those for XP and Vista, have an XML bug that requires a workaround at the IdP -- only if you care to work with them, of course.  You need:

• A patched xml-security library. The patch allows an option to strip whitespace from xml signatures - a need of MicroSoft's CardSpace identity selector.  The patch, which uses a system property, org.apache.xml.security.ignoreLineBreaks=true, to activate the no-whitespace mode.  Later versions of the library support this property, but have a different and equally fatal reaction with the cardspace bug.
  • A patched 1.4.1 library can be obtained from https://staff.washington.edu/fox/xmlsec-1.4.1-nws.jar.

• An additional property definition for tomcat's startup:

  JAVA_OPTS="$JAVA_OPTS \-Dorg.apache.xml.security.ignoreLineBreaks=true"