SP Startup takes 20+ minutes

[Scott Koranda]

> 
>     Then we configured the SP to no longer run the signature
>     filter on the file
> 
> 
> Can you provide a working example on how to disable it?
> Thank you.

We changed

<MetadataProvider type="XML" url="http://md.incommon.org/InCommon/InCommon-metadata.xml" backingFilePath="InCommon-metadata.xml" maxRefreshDelay="28800" legacyOrgNames="true">
    <MetadataFilter type="Signature" certificate="/etc/shibboleth/inc-md-cert.pem"/>
    <MetadataFilter type="RequireValidUntil" maxValidityInterval="2419200" />
    <MetadataFilter type="Blacklist" matcher="EntityAttributes">
      <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
      </saml:Attribute>
    </MetadataFilter>
</MetadataProvider>

to be instead

<MetadataProvider type="XML" file="/var/cache/shibboleth/InCommon-metadata-verified.xml" legacyOrgNames="true">
    <MetadataFilter type="RequireValidUntil" maxValidityInterval="2419200" />
    <MetadataFilter type="Blacklist" matcher="EntityAttributes">
      <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
        <saml:AttributeValue>http://refeds.org/category/hide-from-discovery</saml:AttributeValue>
      </saml:Attribute>
    </MetadataFilter>
</MetadataProvider>

Scott K