IdP failed to retrive metada (problem, possible solution, and good practice): javax.net.ssl.SSLPeerUnverifiedException: SSL peer failed hostname validation for name: null

[Cantor, Scott]

On 7/24/14, 5:27 PM, "Christian Munive" <christian.munive at gmail.com> wrote:
>
>My question is: Is this a bad practice?

Yes. Just use http; you should sign the metadata, have a validUntil value,
and enforce a limit on the validity period. If the SSL isn't part of the
trust fabric, you shouldn't use it, it will create confusion, barriers to
getting the metadata, and just generally be a pain.

Or you can set the disregardSslCertificate flag and turn off the SSL
checking. That is a global setting in V2 due to library limitations.

-- Scott