SP certificate rollover

[Etienne Dysli-Metref]

On 05/03/17 09:08, Jozef Misutka wrote:
> If Shibboleth IdP/SP software cannot handle key names (and there indeed
> is documentation showing the usage of keynames [1,2]) then it is really
> not us who broke it!
> The same applies for federations that are using keynames.
> 
> [1] https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPCredentialResolver
> [2] https://www.switch.ch/aai/guides/sp/certificate-rollover/

Our certificate rollover guide that you cite has key names in the *SP's*
*configuration* to help humans distinguish those keys. SWITCHaai
federation metadata does not contain any KeyName element (have a look at
http://metadata.aai.switch.ch/metadata.switchaai.xml).

  Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/users/attachments/20170307/47cf2351/attachment.sig>