Jetty Quickstart with Shib IDP?

[Brent Putman]

On 11/12/16 2:45 PM, Tom Scavo wrote:
> Is there an option to bypass signature verification on the backup file
> (as there is in the SP)? 

No, because there's currently really no good way to do it.  The
signature validation filter is just buried in the filter chain and
there's no easy way to skip it directly from the "outside".  The
cleanest way will be to change the MetadataFilter API to introduce a
new MetadataFilterContext or something that is passed in on the
filter's method call, to effectively parameterize filter operations. 
We'll probably do that, but it's a 4.0.0 thing.

> If no, do you think such an option would have
> a significant effect on IdP startup time?

Honestly, I don't know.  It obviously will have some effect, but I
really don't know for sure how much it is, relative say to the HTTP
fetch cost.  I suspect the saving will be much less than the HTTP fetch
cost, but we'll see.  That's actually something for which we ought to
look at adding new Metrics instrumentation: filtering time, and maybe
specifically signature verification time.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161112/db35b598/attachment.html>