Error retrieving metadata: SSLPeerUnverifiedException

Brent Putman putmanb at georgetown.edu
Thu Aug 27 23:22:37 EDT 2015



On 8/27/15 10:34 PM, Baron Fujimoto wrote:
>
> Ahh, thanks yes. disregardSslCertificate at
> <https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider#IdPMetadataProvider-FileBackedHTTPMetadataProvider>

Yes, that's right.  In v2 just be aware of an unfortunate side-effect
of setting that to true, detailed in a security advisory from last year:

http://shibboleth.net/community/advisories/secadv_20130417.txt

I.e. it will have global effect. It's not limited to the single
provider on which you set it.





More information about the users mailing list