Shib IdP - Metadata Download and Java 1.7.0_85

Cantor, Scott cantor.2 at osu.edu
Thu Jul 23 13:19:38 EDT 2015


On 7/23/15, 1:18 PM, "users on behalf of Brent Putman" <users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:
>
>On 7/23/15 1:07 PM, Cantor, Scott wrote:
>>
>> I assume that setting disregardTlsCertificate also works around this if the TLS part is a formality?
>
>Yes, it should work around, since that wires a null HostnameVerifier
>and the verification is therefore completely skipped.

I assumed, I just can't bring myself to trust(sic) myself on this stuff anymore.

-- Scott



More information about the users mailing list