Don't try to check the signature if there is no one there :-/

1 files changed, 7 insertions, 6 deletions

diff --git a/src/saml2/response.py b/src/saml2/response.py
index 9194a475..64c16e78 100644
--- a/src/saml2/response.py
+++ b/src/saml2/response.py
@@ -758,12 +758,13 @@ class AuthnResponse(StatusResponse):
         else:
             logger.debug("signed")
 
-        try:
-            self.sec.check_signature(assertion, class_name(assertion),
-                                     self.xmlstr)
-        except Exception as exc:
-            logger.error("correctly_signed_response: %s" % exc)
-            raise
+            try:
+                self.sec.check_signature(assertion, class_name(assertion),
+                                         self.xmlstr)
+            except Exception as exc:
+                logger.error("correctly_signed_response: %s" % exc)
+                raise
+
         self.assertion = assertion
         logger.debug("assertion context: %s" % (self.context,))
         logger.debug("assertion keys: %s" % (assertion.keyswv()))