1 files changed, 7 insertions, 10 deletions
diff --git a/spss.server/src/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationProfileFactory.java b/spss.server/src/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationProfileFactory.java
index 858964c82..5df13a337 100644
--- a/spss.server/src/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationProfileFactory.java
+++ b/spss.server/src/at/gv/egovernment/moa/spss/server/invoke/XMLSignatureVerificationProfileFactory.java
@@ -75,19 +75,16 @@ public class XMLSignatureVerificationProfileFactory {
     profile.setIncludeHashInputData(request.getReturnHashInputData());
 
     // set the security layer manifest check parameters
+    // and transformation supplements (if present) 
     checkParams = request.getSignatureManifestCheckParams();
+    profile.setCheckSecurityLayerManifest(true);
+    profile.setIncludeReferenceInputData(checkParams != null ? checkParams.getReturnReferenceInputData() : false);
     if (checkParams != null) {
-      List transformationSupplements;
-
-      profile.setCheckSecurityLayerManifest(true);
-      profile.setIncludeReferenceInputData(
-        checkParams.getReturnReferenceInputData());
-      transformationSupplements = buildTransformationSupplements();
-      profile.setTransformationSupplements(transformationSupplements);
+        List transformationSupplements;
+        transformationSupplements = buildTransformationSupplements();
+        profile.setTransformationSupplements(transformationSupplements);
     } else {
-      profile.setCheckSecurityLayerManifest(false);
-      profile.setIncludeReferenceInputData(false);
-      profile.setTransformationSupplements(Collections.EMPTY_LIST);
+        profile.setTransformationSupplements(Collections.EMPTY_LIST);
     }
 
     return profile;