Cert rollover sanity check

[Tom Scavo]

On Fri, Oct 21, 2011 at 10:56 AM, Mike Flynn <shibbolethlynda at yahoo.com> wrote:
> ... my step 2 will look like this:
>         Change old setting FROM:
>
>          <!-- Your SP generated these credentials.  They're used to talk to
> IdP's. -->
>          <CredentialResolver type="File" key="sp-key.pem"
> certificate="sp-cert.pem"/>
>
>         TO:
>
>         <CredentialResolver type="Chaining">
>         <!--
>              Certificate/Private key pairs are read in sequence.
>              Unless specificially defined only the first
>              CredentialResolver is used for attribute requests.
>         -->
>               <CredentialResolver type="File" keyName="Standby"
> use="encryption"
>
> key="C:\opt\shibboleth-sp\etc\shibboleth\sp-key-2011.pem"
>
> certificate="C:\opt\shibboleth-sp\etc\shibboleth\sp-cert-2011.pem"/>
>              <CredentialResolver type="File" keyName="Active"
>
> key="C:\opt\shibboleth-sp\etc\shibboleth\sp-key.pem"
>
> certificate="C:\opt\shibboleth-sp\etc\shibboleth\sp-cert.pem"/>
>         </CredentialResolver>
>
> That about right?

Yup!

Good luck,
Tom