Metadata requireSignedMetadata=false Behavior

Cantor, Scott cantor.2 at osu.edu
Mon Jun 8 10:10:59 EDT 2015


On 6/7/15, 7:31 PM, "users on behalf of Brent Putman" <users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:
>
>Let me know if that doesn't at least clarify the technical aspects of what's going on.  I haven't looked at all the docs/comments, esp in the IdP and schema, so I don't know if any of that disagrees with the technical reality.  Perhaps we should deprecate the 'requireSignedMetadata' and/or 'requireSignature' properties in favor of something more descriptive like 'requireSignedRoot'.

I would say so, that's a very oddly named flag. Can you file a bug on that?

I still think we should pull the flag from the document since we're setting it to the default value in the example anyway, and I don't know that I've ever seen somebody ask about having it off.

-- Scott



More information about the users mailing list