X-Git-Url: http://www.project-moonshot.org/gitweb/?a=blobdiff_plain;f=xmltooling%2Fsecurity%2Fimpl%2FInlineKeyResolver.cpp;h=ab1d418279d6fb47fefec6a2b8926cd8118139f6;hb=b866fa50681d672f1b047f082f2580fb981c2194;hp=6bf427f5dde187dd7ed3413ff4aedb94ff88645f;hpb=a9e55eb70ce3fcf619988fb7bb590fd9f04e291d;p=shibboleth%2Fxmltooling.git

diff --git a/xmltooling/security/impl/InlineKeyResolver.cpp b/xmltooling/security/impl/InlineKeyResolver.cpp
index 6bf427f..ab1d418 100644
--- a/xmltooling/security/impl/InlineKeyResolver.cpp
+++ b/xmltooling/security/impl/InlineKeyResolver.cpp
@@ -104,13 +104,13 @@ namespace xmltooling {
             m_credctx = context;
         }
 
-        void resolve(const KeyInfo* keyInfo, int types=0, bool followRefs=true);
-        void resolve(DSIGKeyInfoList* keyInfo, int types=0, bool followRefs=true);
+        void resolve(const KeyInfo* keyInfo, int types=0, bool followRefs=false);
+        void resolve(DSIGKeyInfoList* keyInfo, int types=0, bool followRefs=false);
 
     private:
-        bool resolveCerts(const KeyInfo* keyInfo, bool followRefs=true);
-        bool resolveKey(const KeyInfo* keyInfo, bool followRefs=true);
-        bool resolveCRLs(const KeyInfo* keyInfo, bool followRefs=true);
+        bool resolveCerts(const KeyInfo* keyInfo, bool followRefs=false);
+        bool resolveKey(const KeyInfo* keyInfo, bool followRefs=false);
+        bool resolveCRLs(const KeyInfo* keyInfo, bool followRefs=false);
 
         KeyInfoCredentialContext* m_credctx;
     };
@@ -121,7 +121,7 @@ namespace xmltooling {
     {
     public:
         InlineKeyResolver(const DOMElement* e)
-            : m_followRefs(XMLHelper::getNodeValueAsBool(e ? e->getAttributeNodeNS(nullptr, keyInfoReferences) : nullptr, true)) {
+            : m_followRefs(XMLHelper::getNodeValueAsBool(e ? e->getAttributeNodeNS(nullptr, keyInfoReferences) : nullptr, false)) {
         }
 
         virtual ~InlineKeyResolver() {}