xmlsectool bug (not)

[Tom Scavo]

Ian, thank you for the very helpful summary. I'll share your note with
InCommon staff and with the original poster.

Tom

On Thu, Dec 12, 2013 at 7:39 AM, Ian Young <ian at iay.org.uk> wrote:
> For people here who care, I have resolved this issue:
>
>         https://issues.shibboleth.net/jira/browse/SIDP-598
>
> Salient points:
>
> * The InCommon metadata was always in fact correctly encoded.
>
> * XmlSecTool was therefore correct to say that it was schema-valid; there is no bug in XmlSecTool here.
>
> * The actual problem was a bug in IdP versions up to and including v2.1.5 (actually in OpenSAML) which caused it to write badly encoded backup files from the FileBackedHTTPMetadataProvider. I don't believe we were aware of the bug at the time.
>
> * I believe that issue was corrected in passing when that provider was rewritten for other reasons as part of the v2.2.0 release.
>
> * Anyone running 2.1.5 may have trouble with, say, *some* accented characters in metadata as a result of this issue. They will only notice this if their system loses connection to the metadata publisher, or is restarted.
>
> * 2.1.5 has been EOL for three years for a reason, people. Upgrade!
>
>         -- Ian
>
>
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net