Signature trust could not be established via PKIX validation of signing credential

[Cantor, Scott]

> I finally noticed the problem when looking at the examples in
> https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataKeyDescript
> or.  Lessons learned: RTFM.  I'm still going to blame the SP though, since it
> was their metadata. :D

I was headed there eventually, but I keep forgetting how forgiving the IdP is with the XML. The SP just wouldn't load it, I don't think, schema or not.

Actually, can you file a bug on that? If nothing else maybe it can be adjusted in V3. The logging needs work anyway, the absence of the element shouldn't cause the trust engine to go silent.

-- Scott