Possible problem with validUntil in opensaml
Leif Johansson
leifj at sunet.se
Mon Jun 18 15:19:43 BST 2012
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/18/2012 04:05 PM, Chad La Joie wrote:
> That is currently expected behavior. There was a thread about it
> on, I think, the user's list some time ago.
>
> The short of it is the current IdP treats the metadata file as an
> atomic whole so if one thing is invalid it scraps the whole file.
> That's the most conservative approach to take. v3 does not take
> the view that the file is an atomic item and so it should be easier
> to just discard the expired EntitiesDescriptors, EntityDescriptors,
> and Roles.
>
Surprising, but good answer.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk/fOP8ACgkQ8Jx8FtbMZnc7ngCdGX62id+ZYuWajXU7RK3IRbp7
d+IAoIHdYImyFH8egjKLfqN7oZtBpk9v
=Em5Z
-----END PGP SIGNATURE-----
More information about the dev
mailing list