Certificate in IDP metadata xml file
Kobe Bryant
kbbryant61 at gmail.com
Sat Dec 17 16:37:26 GMT 2011
Off topic:
>With one unimportant edge case exception, the metadata is of no
interest to the
IdP.
Which edge case are you referring to?
thnx
/Kobe
On Sat, Dec 17, 2011 at 2:54 AM, Rod Widdowson <rdw at steadingsoftware.com>wrote:
> Ajay,
> Briefly, No.
>
> Metadata is transportable (it is your statement about your IdP which other
> entities will save and consult), so specifying a file:
> type URL (even if it was allowed) would not work. With one unimportant
> edge case exception, the metadata is of no interest to the
> IdP.
>
> In a usual deployment the IdP cert will be extremely slowly changing so
> the cost of cut and pasting the certificate into your
> metadata file will not be a burden.
>
> Rod
>
> > -----Original Message-----
> > From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
> On Behalf Of ajay bhadauria
> > Sent: 17 December 2011 04:10
> > To: users at shibboleth.net
> > Subject: Certificate in IDP metadata xml file
> >
> > Hi,
> >
> > I am new to the shibboleth IDP. I wanted to know that can I give the
> location of idp
> > certificate(/shibboleth/cert/idp.cert) in idp-metadata.xml file as
> below ?
> >
> > <ds:X509Certificate>
> > file:///shibboleth/cert/idp.cert
> > </ds:X509Certificate>
> >
> > Thanks
> > Ajay
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111217/d19a60ba/attachment.html
More information about the users
mailing list