IDP log files not created

[Kaustubh Nagraj]

Yes, you are right. I have not commented the part concerning signature
validation. However the page at TestShib does not mention anything related
to uncommenting that. Also, would uncommenting that still allow me to use a
self signed certificate?

On Mon, Oct 24, 2011 at 12:39 PM, Rod Widdowson <rdw at steadingsoftware.com>wrote:

> You have probably uncommented out the bit in the RelyingParty.xml file
> which sets up the metadata source:
>
> >                 <metadata:MetadataFilter
> xsi:type="metadata:SignatureValidation"
> >
> trustEngineRef="shibboleth.MetadataTrustEngine"
>
>
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >                                 requireSignedMetadata="true" />
>
> But not commented out the bit which sets up the signature validation
>
> >    <!-- Trust engine used to evaluate the signature on loaded metadata.
> -->
>
> >    <security:TrustEngine id="shibboleth.MetadataTrustEngine"
> xsi:type="security:StaticExplicitKeySignature">
>
>                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> >        <security:Credential id="MyFederation1Credentials"
> xsi:type="security:X509Filesystem">
> >
>  <security:Certificate>$IDP_HOME$/credentials/federation1.crt</security:Certificate>
> >        </security:Credential>
> >    </security:TrustEngine>
>
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20111024/a296f15c/attachment.html