Possible problem with validUntil in opensaml

Leif Johansson leifj at sunet.se
Mon Jun 18 15:19:43 BST 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/18/2012 04:05 PM, Chad La Joie wrote:
> That is currently expected behavior.  There was a thread about it
> on, I think, the user's list some time ago.
> 
> The short of it is the current IdP treats the metadata file as an 
> atomic whole so if one thing is invalid it scraps the whole file. 
> That's the most conservative approach to take.  v3 does not take
> the view that the file is an atomic item and so it should be easier
> to just discard the expired EntitiesDescriptors, EntityDescriptors,
> and Roles.
> 

Surprising, but good answer.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/fOP8ACgkQ8Jx8FtbMZnc7ngCdGX62id+ZYuWajXU7RK3IRbp7
d+IAoIHdYImyFH8egjKLfqN7oZtBpk9v
=Em5Z
-----END PGP SIGNATURE-----


More information about the dev mailing list