key rollover when keyname present

[Alan Buxey]

hi,

just checking on what a keyname presence brings to the party when
doing a rollover, so eg instead of
a starting point of just

<CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/>

there is

<CredentialResolver type="File" keyName="live" key="sp-key.pem"
certificate="sp-cert.pem"/>


this keyname is then known to various RelyingParty statements


can I 'simply'

<CredentialResolver type="File" keyName="live" key="new-sp-key.pem"
certificate="new-sp-cert.pem" use="signing"/>
<CredentialResolver type="File" keyName="live" key="sp-key.pem"
certificate="sp-cert.pem"/>

as the first step and then just remove the older key when doing final
step or will duplicate keynames cause issues
elsewhere ?


many thanks

alan