Subject: what is the significance of the string "Cert"?.  What does it mean?  Is this like a public key?
Date: 2018-06-12 20:46:06
From: RickPace79
Source: significance-string-cert-mean-like-public-key
----------------------------------------------------------------------

What is the significance of the string “Cert” in the code example below?  I notice in the sample code provided you are using this string in the Identity Provider.

 

           // Get the previously loaded certificate.
            X509Certificate2 x509Certificate = (X509Certificate2)Application["Cert"];

            // Sign the SAML response with the certificate.
            samlResponse.Sign(x509Certificate);

 
... and then again in the Service Provider to Validate the SAML response signature the string "Cert" is being used. It occurs to me that this is maybe a "Type" of X509Certificate2.  My end game is to allow a client of ours to use their SAML after they sign in to verify the signature, load the previously loaded Certificate and validate the SAML response with said certificate just like in the sample code below.  

What information do I need from the company?  Perhaps instead of "Cert" they are using something else??? Also, what is "Cert" ????  Thanks in advance. 

  
      
               
                // Is it signed?
                if (samlResponse.IsSigned())
                {
                    // Loaded the previously loaded certificate.
                    X509Certificate2 x509Certificate = (X509Certificate2)Application["Cert"];

                    // Validate the SAML response with the certificate.
                    if (!samlResponse.Validate(x509Certificate))
                    {
                        throw new ApplicationException("SAML response signature is not valid.");
                    }
                }

----------------------------------------------------------------------

Note: This question has been asked on the Q&A forum of Thang Dang's fraudulent ComponentPro brand
If you purchased anything from ComponentPro, you have been scammed. Contact the payment processor
who sold you the license and ask for your money back.

Back to ComponentPro Q&A Forum Index