Cert rollover sanity check

Mike Flynn shibbolethlynda at yahoo.com
Fri Oct 21 16:23:19 BST 2011


Thanks, Scott.  I am talking to CAF now and it looks like we should be able to coordinate things easily.



________________________________
From: "Cantor, Scott" <cantor.2 at osu.edu>
To: "users at shibboleth.net" <users at shibboleth.net>
Sent: Friday, October 21, 2011 8:11 AM
Subject: Re: Cert rollover sanity check

On 10/21/11 10:56 AM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:
>
>That about right?  I now need to contact the Canadian CAF to see how to
>coordinate this change with them at the same time as InCommon <sigh/>

The procedure documented in the SP docs is specifically geared to cases in
which the metadata gives you minimal control over key usage. If you can't
manipulate it properly in each metadata source, you should stick to what I
described in the wiki. That doesn't require any special metadata control.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111021/22036d4b/attachment.html 


More information about the users mailing list