using a cert bundle in a TrustEngine

[Cantor, Scott]

On 1/30/14, 9:17 PM, "Liam Hoekenga" <liamr at umich.edu> wrote:

>We've been given a certificate that wasn't signed by a top level CA.  We
>can use the certificate itself in the TrustEngine definition, but the
>people running the service provider thinks we need to use the certificate
>bundle that can verify the host certificate, through several
>intermediates, back up to the top level cert.

Whatever the SP is asking about, it has nothing to do with a TrustEngine.
That has nothing to do with what somebody else receives.

As the other poster said, the starting point is that this is unneeded. You
should not need, nor should you use, non-self-signed keys for signing or
for SOAP authentication, and those are the only interactions that would
involve an SP.

Assuming you were violating that practice, then it would depend on what
exactly the issue was with the SP.

-- Scott