How to sign the IdP metadata?

[WULMS Alex]

Hi,

One of the service providers that we are dealing with wants to receive signed metadata from our IdP. However, the metadata file generated by the Shibboleth IdP installation ant program is by default not signed.

Do you know of some existing tool or script that I can use to sign it with our private key?

I have found a code snippet on https://wiki.shibboleth.net/confluence/plugins/viewsource/viewpagesrc.action?pageId=3277047 that shows how I can use the API to sign a SAML object once I have the SAML object in internal format (as a SAMLObject) but it does not show for example how I can read the IdP metadata into this internal format.

Any help is welcome.

Thanks and kind regards,
Alex

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121128/414f3b43/attachment.html