shibd unable to verify signature when metadata is cached

[Bradley Beddoes]

Scott,
You're correct, I hadn't yet filed this bug, I've now had a chance to do
that at
https://issues.shibboleth.net/jira/browse/SSPCPP-684

Thanks for your help on this problem. Do let me know if I can provide any
other input on the issue itself.

Bradley

On Thu, Mar 24, 2016 at 9:10 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > I note that an eduGAIN entity also started publishing a description
> containing
> > `
` within the last few days. This initially broke the eduGAIN
> signing
> > process but once that was corrected the values eventually flowed out to
> SP
> > which then had problems.
>
> Yes, it seemed weirdly coincidental that this happened independently after
> so many years. I wonder if some tool is involved somewhere?
>
> > I'll be adding some further filtering to our raw metadata ingest
> routines (for
> > sources such as eduGAIN) before we re-publish them as Shibboleth SP is
> > such a critical component for us. This might be a useful consideration
> for
> > other operators as well, should they have the capability.
>
> I don't think this got filed as a bug. It is one, if not so easy to fix.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
*Bradley Beddoes* | Technical Lead - Innovation, Software Development and
Infrastructure
*Australian Access Federation Inc*
*Web: http://www.aaf.edu.au <http://www.aaf.edu.au/> | Support:*
http://support.aaf.edu.au <http://www.aaf.edu.au/>

PRIVILEGED – PRIVATE AND CONFIDENTIAL
This email and any files transmitted with it are intended solely for the
use of the addressee(s) and may contain information which is confidential
or privileged.  If you receive this email and you are not the addressee(s)
[or responsible for delivery of the email to the addressee(s)], please
disregard the contents of the email, delete the email and notify the author
immediately.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160324/75a2d7c1/attachment.html>