From a7155df10ab15b50d387c0f2a1fa685afe79fec5 Mon Sep 17 00:00:00 2001
From: Wahdat <Wahadat.jan@trialx.com>
Date: Mon, 5 Jun 2023 14:40:51 +0530
Subject: [PATCH] added config to recieve a valid X509Data element

---
 src/saml2/sigver.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/saml2/sigver.py b/src/saml2/sigver.py
index 01a12a71d..095d99a22 100644
--- a/src/saml2/sigver.py
+++ b/src/saml2/sigver.py
@@ -806,9 +806,10 @@ def validate_signature(self, signedtext, cert_file, cert_type, node_name, node_i
         com_list = [
             self.xmlsec,
             "--verify",
+            "--enabled-key-data",
+            "x509",
             "--enabled-reference-uris",
             "empty,same-doc",
-            "--enabled-key-data",
             "raw-x509-cert",
             f"--pubkey-cert-{cert_type}",
             cert_file,