Unverified RP issue CRITICAL

[Cantor, Scott]

On 7/26/17, 11:04 AM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

> You are likely correct.  I am coming into territory that was recently vacated by a sys-admin who ran our aggregation stuff, and
> set the constraints.  I am finding that the agg did not run since 7 days ago, so I think the expired MD is likely.

Without much doubt then, I didn't have the context. I believe we added more logging post-3.3 to highlight this problem, I had a similar issue with a campus metadata source. It was virtually silent until now.

Just take the file it backed up to and remove the validUntil (and signature check) and load it locally for now until the remote source is fixed.

-- Scott