Metadata expiry and computing a new expiration time.

[Simon Fraser]

On 11/09/15 14:45, Tom Scavo wrote:
> On Fri, Sep 11, 2015 at 4:46 AM, Simon Fraser <srf at sanger.ac.uk> wrote:
>>
>> We recently upgraded our identity provider from 2.x to 3.1.1 (it took a
>> while to get working, which is why we're not yet on 3.1.2). We are
>> encountering a metadata expiry problem, and I'd like some advice.
>
> For the archives, can you tell us what version of Shibboleth was
> involved? Is it V3.1.1 or V2? If the latter, can you be more specific?
>
> (Just yesterday we responded to a similar issue with Shib IdP V2.3.8.)

If you mean the service provider, I'm not sure how to tell, since it's 
an external source.

The identity provider is 3.1.1.


>> metadataURL="http://metadata.ukfederation.org.uk/ukfederation-metadata.xml">
>>      </MetadataProvider>
>
> Btw, that configuration is completely insecure since it does not
> verify the signature on the metadata.

Happy to change it, I wasn't able to get it working with the 
verification in place.

Simon.



-- 
 The Wellcome Trust Sanger Institute is operated by Genome Research 
 Limited, a charity registered in England with number 1021457 and a 
 company registered in England with number 2742969, whose registered 
 office is 215 Euston Road, London, NW1 2BE.