Assertion Occasionally Signed with Incorrect Cert

[Cantor, Scott]

On 8/16/13 11:58 AM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 8/16/13 11:23 AM, "Mark Valites" <mvalites at buffalo.edu> wrote:
>
>>Recently one of our IIS SPs had two shib changes made to it, at the same
>>time - it was updated to 2.5.2 & it's shib cert updated. There was a
>>desire to change the end user facing / webserver cert to match the shib
>>one as well, so a new cert/key pair for both IIS & shib ended up getting
>>generated/signed.

Just FYI, though, terrible idea. Do not allow any other SPs you have
locally to make that mistake, there is no reason to make them the same and
you should NOT do so.

-- Scott