XML Signature Generation using IBM SDK 6.0

Question

I'm having an interesting problem trying to sign a SAML2 Assertion using IBM's JRE 6.0. If I run the code under a Sun JDK, it signs the assertions correctly and the signature verifies. If I run the exact same code under the IBM JRE, the Assertion is created correctly, but the signature won't verify. Again, this is the same code, indeed, as it's running from Jetty, it's the exact same Jetty config and WAR file as well. I have two instances of Jetty running on different ports with different JREs but pointing to the same Jetty home. The signatures generated under the Sun JRE validate, but those generated under the IBM JRE do not. I'm frankly stumped and am running out of things to try, so any suggestions would be helpful.

Answer 1

A few years late, but I'm going to answer this myself. The problem was a mix of DOM1 (non-namespace aware) and DOM2+ (namespace aware) calls. By shifting everything to namespace aware DOM2+ calls, the problem went away.