SP certificate rollover

[Jozef Misutka]

On 3 March 2017 at 16:43, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 3/3/17, 10:39 AM, "users on behalf of Jozef Misutka" <
> users-bounces at shibboleth.net on behalf of misutka at ufal.mff.cuni.cz> wrote:
>
> > Thank you all for the answers. Because I still do not have the answers,
> I will try to rephrase
> >
> > IdP consumed this metadata:
>
> Don't try and use key names. Just don't.
>
> > 1. Will it work?
>
> Yes, generally, and if not you probably borked it by using key names.
>

If Shibboleth IdP/SP software cannot handle key names (and there indeed is
documentation showing the usage of keynames [1,2]) then it is really not us
who broke it!
The same applies for federations that are using keynames.

[1] https://wiki.shibboleth.net/confluence/display/SHIB2/Nat
iveSPCredentialResolver
[2] https://www.switch.ch/aai/guides/sp/certificate-rollover/

Jozef


> > 2. What if Active/Standby are vice versa at one of them?
>
> Doesn't matter. Generally.
>

> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170305/44d7be97/attachment.html>