SSLHostnameVerification issue

[Cantor, Scott]

> We are attempting to pull in metadata from a new SP and unlike most SP's
> this one while residing within our namespace is hosted externally and is
> failing the SSLHostnameVerification. Is there are way to disable
> SSLHostnameVerification for a specific RelayingParty metadata entry? What
> are others doing who run into this issue?

The documentation includes the relevant settings that turn off SSL verification (disregardTlsVerification IIRC). They should, obviously, never be used unless the metadata is signed and verified and an appropriate validUntil is enforced. If you don't do that, you can save time and just turn on Unverified/Anonymous RP support, as you have an open system anyway.

-- Scott