Metadata requireSignedMetadata=false Behavior

[Brent Putman]

On 6/8/15 10:10 AM, Cantor, Scott wrote:
> On 6/7/15, 7:31 PM, "users on behalf of Brent Putman" <users-bounces at shibboleth.net on behalf of putmanb at georgetown.edu> wrote:
>> Let me know if that doesn't at least clarify the technical aspects of what's going on.  I haven't looked at all the docs/comments, esp in the IdP and schema, so I don't know if any of that disagrees with the technical reality.  Perhaps we should deprecate the 'requireSignedMetadata' and/or 'requireSignature' properties in favor of something more descriptive like 'requireSignedRoot'.
> I would say so, that's a very oddly named flag. Can you file a bug on that?

Done

https://issues.shibboleth.net/jira/browse/IDP-735
https://issues.shibboleth.net/jira/browse/OSJ-120


Also occurred to me that we can more optimally handle the case where the
root fails validation, or is not signed when required.  In v3 we return
the filtered data from filter(...).

https://issues.shibboleth.net/jira/browse/OSJ-121