IdP Infocard cardspace issues
Vista and XP Cardspace issues
Early versions of Cardspace, such as those for XP and Vista, have an XML bug that requires a workaround at the IdP -- only if you care to work with them, of course. You need:
- A patched
xml-security
library. The patch allows an option to strip whitespace from xml signatures - a need of MicroSoft's CardSpace identity selector. The patch, which uses a system property,org.apache.xml.security.ignoreLineBreaks=true
, to activate the no-whitespace mode. Later versions of the library support this property, but have a different and equally fatal reaction with the cardspace bug.- A patched 1.4.1 library can be obtained from https://staff.washington.edu/fox/xmlsec-1.4.1-nws.jar.
- An additional property definition for tomcat's startup:
JAVA_OPTS="$JAVA_OPTS \-Dorg.apache.xml.security.ignoreLineBreaks=true"