opensaml::SecurityPolicyException: Message expired, was issued too long ago.

[Cantor, Scott]

On 7/1/15, 11:40 AM, "users on behalf of James W. Anderson" <users-bounces at shibboleth.net on behalf of jamesanderson at coca-cola.com> wrote:



>We temporarily worked around this by changing the clockSkew setting in shibboleth2.xml to 7200 seconds, but I’d like to understand what is causing this, because it looks the time values are well within the default skew setting of 180 seconds.

The values you're looking at already have the skew applied, it's a bit non-obvious. So nothing mysterious.

-- Scott