Why requiring --certificate when verifySignature?

[Cantor, Scott]

On 10/8/20, 7:55 PM, "dev on behalf of Weiwu Zhang via dev" <dev-bounces at shibboleth.net on behalf of dev at shibboleth.net> wrote:

>    In my case, the validity of the certificate can't be asserted directly
>    through a certificate, but rather a trusted CA list that is known to
>    the verifier.

This is a command line tool for simple uses around SAML metadata and occasional debugging of SAML messages, it's not a library. What you're trying to do is what OpenSAML's trust engines. You need a complete library stack to implement this, not a command line utility.

-- Scott