question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Invalid X509 Serial Number Problem

See original GitHub issue

When having a SAML response with xml that contains:

<ds:X509SerialNumber>20630951819271670505357133780297999999</ds:X509SerialNumber>

calling:

serviceProvider.parseLoginResponse

raises following error:

this is not a valid saml response with errors: Error: Element '{http://www.w3.org/2000/09/xmldsig#}X509SerialNumber': '20630951819271670505357133780297488388' is not a valid value of the atomic type 'xs:integer'.

Any ideas how can I fix this?

Issue Analytics

  • State:closed
  • Created 5 years ago
  • Comments:14 (14 by maintainers)

github_iconTop GitHub Comments

1reaction
rastko-florencehccommented, Sep 12, 2018

@tngan changing the <element name="X509SerialNumber" type="integer"/> in samlify/schemas/xmldsig-core-schema.xsd to type string fixed the problem!

Thanks!

0reactions
rastko-florencehccommented, Sep 25, 2018

@tngan no problem! Thank you for accepting it!

Read more comments on GitHub >

github_iconTop Results From Across the Web

X.509 certificate serial number display wrongly shows leading ...
When displaying X.509 certificates, for instance in the certificate viewer, there is a bug in the hexadecimal output of cert serial numbers (and...
Read more >
SSL certificate import fails with "unable to validate ... - AskF5
K45732840: SSL certificate import fails with "unable to validate certificate, invalid x509 file" error. Support Solution.
Read more >
Is serial number a unique key for X509 certificate?
In a certificate, the serial number is chosen by the CA which issued the certificate. It is just written in the certificate. The...
Read more >
Advisory for SSL problems with leading zeros on OpenSSL 1.1.0
This means that the CA public certificate contains an invalid serial number. More specifically, the serial number starts with a leading zero ...
Read more >
x509 - OpenSSL
Normally if the -CA option is specified and the serial number file does not exist it is an error. -extfile filename. file containing...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found