Veoci Integration

[Brent Putman]

On 2/8/17 3:55 PM, Klingenstein, Nate wrote:
> What happens if a byte-identical certificate is placed in metadata
> twice, once as an explicit use="signing" and once as an explicit
> use="encryption", as compared to the more traditional use of separate
> keys or no use element?

AFAIK it's not a problem.  It's not going to result in one of them not
being resolved or something like that.  Some people have been doing
that for quite a long time, I think.

As Scott said, having everything globally thing on DEBUG is probably
confusing. TMI.  However, since you've now narrowed this down to a
failure to resolve encryption key for the SP, putting the following on
DEBUG or even TRACE temporarily might be informative:

org.opensaml.xmlsec.impl
org.opensaml.saml.security.impl

It will at least give you some trace data that the credentials you
think are being processed in the metadata actually are, and what's
going on with them.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170208/6aec2cec/attachment-0001.html>