SP metadata: certificate for signing and encryption

[Alexey]

AFAIK for signing I should use the certificate of my private key, and for
encryption I should use the certificate of the open key of IdP.


> ...
> <md:KeyDescriptor use="signing">
>     
> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
>         
> <ds:X509Data>
>             
> <ds:X509Certificate>
>                 certificate of my private key
>             
> </ds:X509Certificate>
>         
> </ds:X509Data>
>     
> </ds:KeyInfo>
> </md:KeyDescriptor>
> <md:KeyDescriptor use="encryption">
>     
> <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
>         
> <ds:X509Data>
>             
> <ds:X509Certificate>
>                 certificate of the open key of IdP here
>             
> </ds:X509Certificate>
>         
> </ds:X509Data>
>     
> </ds:KeyInfo>
> </md:KeyDescriptor>

...



-----
Kind regards, Alexey
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/SP-metadata-certificate-for-signing-and-encryption-tp7603709p7603710.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.