SAML2_SOAPClient: Don't throw exception when https key isn't included in metadata.

olavmo-sikt · olavmo-sikt · commit d0a6c7e0043e · 2011-03-07T13:27:28.000Z
git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2766 44740490-163a-0410-bde0-09ae8108e29a
diff --git a/lib/SAML2/SOAPClient.php b/lib/SAML2/SOAPClient.php
@@ -189,7 +189,8 @@ public static function validateSSL($data, XMLSecurityKey $key) {
 		}
 
 		if ($keyInfo['key'] !== $data) {
-			throw new Exception('Key on SSL connection did not match key we validated against.');
+			SimpleSAML_Logger::debug('Key on SSL connection did not match key we validated against.');
+			return FALSE;
 		}
 
 		SimpleSAML_Logger::debug('Message validated based on SSL certificate.');

Original file line number	Diff line number	Diff line change
`@@ -189,7 +189,8 @@ public static function validateSSL($data, XMLSecurityKey $key) {`
`189`	`189`	`}`
`190`	`190`
`191`	`191`	`if ($keyInfo['key'] !== $data) {`
`192`		`- throw new Exception('Key on SSL connection did not match key we validated against.');`
	`192`	`+ SimpleSAML_Logger::debug('Key on SSL connection did not match key we validated against.');`
	`193`	`+ return FALSE;`
`193`	`194`	`}`
`194`	`195`
`195`	`196`	`SimpleSAML_Logger::debug('Message validated based on SSL certificate.');`