The Util#validateSignNode uses the equals method to compare the stored fingerprint with the calculated fingerprint from the signature. If someone (me) were to use the wrong case (upper case) in the properties file for the onelogin.saml2.idp.certfingerprint setting they may be confused as to why the fingerprint validation fails.
I think replacing equals with equalsIgnoreCase would easily solve this problem.
The Util#validateSignNode uses the
equalsmethod to compare the stored fingerprint with the calculated fingerprint from the signature. If someone (me) were to use the wrong case (upper case) in the properties file for theonelogin.saml2.idp.certfingerprintsetting they may be confused as to why the fingerprint validation fails.I think replacing
equalswithequalsIgnoreCasewould easily solve this problem.