Recreating IdP metadata after regenerating certificates?

[Rod Widdowson]

For completeness:

> I don't think it will ever
> overwrite those files using the ant task the installer runs. Could be
> wrong, but that's my guess.

There was a bug in ant in very early versions of V2 (it might even have been
very late versions of V1.3) in which it did misbehave.

In answer to an earlier question the V2 ant has a "renew-cert" target which
generates a new key/cert pair, but this does *NOT* over write the old pair
(they are called idp.[crt|jks|key].new and it does *NOT* touch the metadata.
You are expected to do the roll over yourself.

In V3 there is latent support to regenerate metadata on key change but it is
not exposed yet.  I haven't even decided if this is a good idea or how to
manage it