SP metadata that supports both sha1 and sha2?

[Liam Hoekenga]

On Wed, Jun 25, 2014 at 1:49 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> When you say "includes certificate X", we don't know what that means for
> certain. Saying metadata includes a certificate generally means it includes
> a KeyDescriptor for that certificate and that matters a lot. A certificate
> inside a Signature as a KeyInfo hint means essentially nothing.


Sorry.  The certificates are in KeyInfo -> X509Data -> X509Certificate.
 One cert in each ds:Signature block.

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140625/b73a0888/attachment.html