help signing metadata

[Jonathan Bricker]

How would I have to set up the SP to accept metadata signed from a list of accepted CAs?  It sounds like it is impossible from what was said below.

thanks

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, October 25, 2011 10:22 AM
To: users at shibboleth.net
Subject: Re: help signing metadata

On 10/25/11 10:03 AM, "Jonathan Bricker" <jbricker at exacttarget.com> wrote:

>from a DB.  I removed all but my signed metadata.  When the error says
>root element was not signed does it want the <EntitiesDescriptor> signed
>as well as each <EntityDescriptor>?

You should only sign the root. And if you don't, it can't accept anything
that's inside the unsigned element, that's the point of the filter.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net