SP upgrade 2.3.1 to 2.4.3: disable signature validation of xml metadata?

[Cantor, Scott]

On 6/17/13 7:41 PM, "Jacob Lundberg" <jacob at collegenet.com> wrote:

>
>On Mon, 2013-06-17 at 21:04 +0000, Cantor, Scott wrote:
>> 
>>https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTransportOpt
>>ion
>
>Genius.  I think it is working.  While I was at it, I added whitelist
>filters so at least they can't muck around with other entities.

That's a very good idea.

><MetadataProvider type="XML" uri="https://host.com/path/to/metadata.xml"
>backingFilePath="metadata-host.xml" reloadInterval="7200">
>  <MetadataFilter 
>type="Whitelist"><Include>https://host.com/entityId</Include></MetadataFil
>ter>
>  <TransportOption provider="CURL" option="64">1</TransportOption>
>  <TransportOption provider="CURL" option="81">2</TransportOption>
>  <TransportOption provider="CURL"
>option="10065">/etc/ssl/certs/ca-certificates.crt</TransportOption>
></MetadataProvider>

If you want to put an example into the wiki (the transport options
specifically), feel free. It's a hassle figuring out the option numbers.

-- Scott