Shib MDA 0.8.0 can check the certificate's metadata expiration?

[Ian Young]

On 20 Jan 2014, at 15:05, Marco Malavolti <marco.malavolti at garr.it> wrote:

> - Can MDA check the expiration time of the metadata's certificates?

We don't have a stage to do this yet. There is a JIRA case for it that you can add comments to, though:

https://issues.shibboleth.net/jira/browse/MDA-75

I have been developing a general framework for handling certificates in metadata in the ukf-mda project:

https://github.com/ukf/ukf-mda

I think it would probably be trivial at this stage to add something to check for expiry dates to that framework. Actually, the hardest part is probably to write tests for such code which would not stop working at some point in the future... so I may look into this fairly soon.

My plan is to port appropriate parts of ukf-mda back into the Shibboleth MDA codebase for the next release (0.9.0) but I don't have a timescale for that yet.

	-- Ian



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5943 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20140120/a18db40e/attachment.bin