When is PrivateKey password used?

[Cantor, Scott]

On 6/11/13 7:55 PM, "avalanche333" <Matthew.R.Zmuda at td.com> wrote:

>I¹ve had a password set there all along on v 2.3.1 of idp.
>Never and an issue. However today I mistakenly put the wrong password and
>things still worked which had me concerned.

The key is probably not encrypted, and I doubt the password matters then.

I took a look at the schema, and I think Brent understates the degree to
which that schema is, umm, off. It's missing content models all over the
place which means most of the elements are anyType, meaning anything goes.

>However I actually though the purpose of this password was to allow you
>to sign/encrypt SAML messages using the private key. From what I am
>hearing that is
> not the case.

I don't know how to parse your inference. The password might decrypt the
key. The key is used to sign assertions. Encrypting things is done,
indirectly, with a peer's public key, not your own key.

-- Scott