Acquiring Certificate (idp.crt)

[Cantor, Scott]

> Quick question about idp.

Please post further questions of this nature to users, the dev list is just for development issues.

> - It's a good practice to buy a certificate from a CA for production right? I
> mean in order to replace the idp.crt that shibboeth creates for you or the
> self-sign is good enough? (as a separate topic, I already have the browser-
> facing ssl certificate)

No, it's bad practice. There is no reason you need to change this.

> - I'm a little confuse about what type of certificate should I buy: Certificate
> for signing code, apps, etc?

That's why it's bad practice, there is nothing in existence that you can buy that would make any sense, and it would cause problems in any case if you did.

-- Scott