Metadata certificate on idp.testshib.org seems expired on August 2016
Peter Schober
peter.schober at univie.ac.at
Tue Nov 15 09:17:39 EST 2016
* Klingenstein, Nate <nklingenstein at calstate.edu> [2016-11-15 05:46]:
> I guess a certificate can't get any worse than "expired". Software
> that would break is broken. So, as long as I can re-use the keys, I
> won't bother with a rollover process.
ACK. There's a middle ground (implemetations that don't care about
expiration, but reference the certificate itself or its fingerprint --
like SimpleSAMphp did until recently -- both would change even when
re-wrapping the same key), but "test" in the name TestShib should mean
something and people relying on that "service" for more than tests
(which could break any time) are in for a reminder anyway.
-peter
More information about the users
mailing list