metadata expiration issue

[Liam Hoekenga]

We're going to start using pyff to maintain our local federation's metadata.

I'm trying the new aggregate out on our non-prod servers, and I see...

Computing expiration time for metadata from 'http://localhost/md/nonprod.xml
'
Expiration of metadata from 'http://localhost/md/nonprod.xml' will occur at
2014-10-23T15:47:12.000Z

Which I found super confusing, since the validUntil in that XML file is
"2016-07-04T18:00:04Z".

What I found is that our aggregate contains a few entries that have their
own validUntil dates, including this one..

  <md:EntityDescriptor entityID="https://myreviewroom.com/saml2/metadata/"
validUntil="2014-10-23T15:47:12Z">

Shouldn't the IdP get use the validUntil attribute from the
EntitiesDescriptor object, instead of one from one of the child
EntityDescriptor objects?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160624/f619f303/attachment.html>