shibd unable to verify signature when metadata is cached

[Cantor, Scott]

> 4: the cached metadata document from /var/cache/shibboleth - I do note
> there are minor differences

The only differences an xmldiff reports (once I turned off attribute ordering) are that the source document includes a number of 
 encoded characters in the  UIInfo extensions. I will have to dig back into the c14n spec to remember what that represents (other than the obvious, it's a CR).

The backup copy is actually created by writing out the document again, partly to make sure that the XML processing code is doing its job (it would be much safer to just copy byte for byte) so the DOM internally has had those characters replaced somehow.

I presume you reproduced this on a Linux or Mac machine at some point? I just did in Windows.

In terms of the issue, please take a look at your "working" metadata file (I assume the one I'm loading from a different URL isn't having this issue?) and compare it. Use Oxygen or some other good xmldiff tool.

-- Scott