Can Shibboleth reference IDP cert in separate file?

[James W. Anderson]

Is it possible for the Shibboleth SP to reference the IDP x.509 public key in a separate file, instead of pasting it inline with the rest of the metadata? The only way I've ever seen this done is inline, which complicates some of our attempts to automate key management. We'd like to store the keys in a separate file and automatically update those files prior to expiration, instead of updating the entire metadata file.

If this is not an option, is there a security reason for this?

Thanks!




[cid:image001.png at 01D01537.F005A230]


James W. Anderson
Cloud Infrastructure Architect
The Coca-Cola Company
404.676.4914 Office
770.653.1033 Mobile
404.598.4914 Fax
jamesanderson at coca-cola.com<mailto:jamesanderson at coca-cola.com>





________________________________

CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You.

________________________________

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170130/82353f3f/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 12779 bytes
Desc: image001.png
URL: <http://shibboleth.net/pipermail/users/attachments/20170130/82353f3f/attachment-0001.png>