RSA 1.5 and blacklisting

[Praveen Pinto]

Hi Scott,

Thank you so much for your help!  It works!!

What I ended up doing..

Shibboleth2.xml:

Replaced:

  <SecurityPolicies>
    <Policy id="default" validate="false">
      <Rule type="MessageFlow" checkReplay="true" expires="60"/>
      <Rule type="ClientCertAuth" errorFatal="true"/>
      <Rule type="XMLSigning" errorFatal="true"/>
    </Policy>
  </SecurityPolicies>



With:
<!-- Policies that determine how to process and authenticate runtime
messages. -->
 <SecurityPolicyProvider type="XML" validate="true" reloadChanges="false"
path="security-policy.xml"/>




Thanks
Praveen