SP trust fabric certificate expiring

[Scott Klawitter]

This post is regarding a SP trust fabric certificate

We currently have a VeriSign certificate that we are using for our SP. We have not had any problems with this certificate, and it has been accepted by every federation that we have joined. This SP trust fabric cert is expiring and up for renewal.

In our research to renew the cert, we have noticed that many federations have changed their acceptance policies regarding the trust fabric certificate for the SP metadata. Some federations like the UKfederation ARE NOT ACCEPTING VeriSign CERTIFICATES ANYMORE and recommend using a self-signed cert.

I wanted to see if there is a generally acceptable certificate that federations will accept, or is the self-signed cert the right one. Also is there a generally acceptable lifetime for the cert? 5, 10, 20 years?

Thanks,
Scott Klawitter
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120622/0aff6684/attachment-0001.html