shibd unable to verify signature when metadata is cached

[Cantor, Scott]

> - This character was in the MDUI:Description field only
> - It was commented on(not on this list, edugainSG's) that it *could*
> appear in the certificate body after each line too (but didn't in this
> case). Not sure if this would trigger the same problem in shib tools.

I would expect that it would. I don't think it would matter where it appeared.

> I think relevant to the shibboleth users list is the question around
> whether this character is illegal anywhere in XML given the w3.org
> statements on line endings[1] and whitespace[2]?

No, not in my opinion. Bad idea, certainly, but not illegal.

-- Scott