security advisory

[Vignesh, Vanna G.]

FYI. I dont have disregardSslCertificate set in the relying-party.

<metadata:MetadataProvider id="InCommon"
                        xsi:type="FileBackedHTTPMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
                        metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"
                        backingFile="InCommon-metadata.xml" />

From: Vignesh, Vanna G.
Sent: Friday, August 15, 2014 10:56 AM
To: users at shibboleth.net
Subject: security advisory

Please help me to  find out if I need to upgrade the version.
In service.xml, all the resources types are FilesystemResource.
In relying-party.xml, to fetch Incommon, the xsi type is FileBackedHTTPMetadataProvider with the metadataURL =http://md.incommon.org/InCommon/InCommon-metadata.xml
Do I need to upgrade the version or is there any other option?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140815/525ba4e4/attachment.html