xmlsectool bug (not)

[Ian Young]

For people here who care, I have resolved this issue:

	https://issues.shibboleth.net/jira/browse/SIDP-598

Salient points:

* The InCommon metadata was always in fact correctly encoded.

* XmlSecTool was therefore correct to say that it was schema-valid; there is no bug in XmlSecTool here.

* The actual problem was a bug in IdP versions up to and including v2.1.5 (actually in OpenSAML) which caused it to write badly encoded backup files from the FileBackedHTTPMetadataProvider. I don't believe we were aware of the bug at the time.

* I believe that issue was corrected in passing when that provider was rewritten for other reasons as part of the v2.2.0 release.

* Anyone running 2.1.5 may have trouble with, say, *some* accented characters in metadata as a result of this issue. They will only notice this if their system loses connection to the metadata publisher, or is restarted.

* 2.1.5 has been EOL for three years for a reason, people. Upgrade!

	-- Ian

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5943 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20131212/23990bab/attachment.bin