using cert in SP metadata for encryption

[IAM David Bantz]

Thank you Tom  - that confirms my suspected interpretation.

David

On Thu, Nov 17, 2016 at 2:25 PM, Tom Scavo <trscavo at gmail.com> wrote:

> On Thu, Nov 17, 2016 at 6:18 PM, IAM David Bantz <dabantz at alaska.edu>
> wrote:
> > FWIW, here's what the SP's metadata looks like:
>
> That entity descriptor is signed but it contains no KeyDescriptor
> element. Therefore the SP can not sign outbound messages and the IdP
> is not able encrypt message data.
>
> Tom
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161117/6d80570d/attachment.html>