[JIRA] Created: (SSPCPP-428) metadata provider should check validity before replacing old metadata

[Ian Young (JIRA)]

metadata provider should check validity before replacing old metadata
---------------------------------------------------------------------

                 Key: SSPCPP-428
                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-428
             Project: Shibboleth SP - C++
          Issue Type: Improvement
          Components: Error Handling
    Affects Versions: 2.4.3
            Reporter: Ian Young
            Assignee: Scott Cantor


The SP currently accepts metadata from a remote publisher for use prior to checking validUntil.  This means that if for some reason it is exposed to expired metadata then it will replace previously downloaded metadata even though it is still valid.

It would be better to perform the validUntil check (and other similar checks which might cause an aggregate to be largely rejected) before replacing previously downloaded metadata.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira