SP Metadata Cert Expiration

[IAM David Bantz]

On Wed, Aug 3, 2016 at 12:34 PM, Tom Scavo <trscavo at gmail.com> wrote:

> If you're an IdP running Shibboleth, then no, an expired cert in SP
> will not affect you....
>

unless the SP starts using a different cert to sign requests or expects you
to
use a newer cert to encrypt your response. It's not the expired date per
se, but
the SP's reliance on a newer cert that can bite. That's happened to
my IdP when I let an SP's certificate expire instead of replacing it on
time.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160803/a717b16b/attachment-0001.html>