sp key rollover

[Brent Putman]

On 4/17/15 4:51 PM, Cantor, Scott wrote:
>
> I suppose we should consider a RFE at some point to actually attach a schedule as input to key selection. ;-(

I'll get right on that.  Or maybe spec out a federated message bus
system to support inter-organizational signalling.




> Right. This is why I now avoid enabling encryption with any vendors that are using non-self-signed certificates and not running Shibboleth, it basically guarantees they'll force a flag day on me, and it isn't worth it.

As it turns out, the guys who run our IdP for some reason have
encryption turned off for Canvas anyway.  So doesn't affect us.  And I
suppose that is one solution to the "flag day" issue - just disable
encryption until the coast is clear, then wade back in (or not).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150417/9042125c/attachment.html