Shib IdP - Metadata Download and Java 1.7.0_85

[Nate Klingenstein]

> I took that suggestion as a joke.

I took it as gallows humor, but this is a real challenge for many federations because it’s so distributed.

> A patch is just one fix, and the real patch here is to Java to fix their bug.

Agree with that, but I’d love to see Oracle make that statement.  It’s still a major omg that Oracle has adopted OpenSSL’s code review conventions.

> This bug is not a lurker since it will bite basically on step 1 of starting up, so that's a good thing in comparison to more complex ones.

Agree with that one too.  The other recommendation this goes against is loading metadata directly from the SP’s metadata handler.

I’ll be holding my breath to see what Brent comes up with for ldaptive.