users Digest, Vol 77, Issue 113

Peter Schober peter.schober at univie.ac.at
Wed Nov 29 11:09:26 EST 2017


* Cheltenham, Chris <ccheltenham-ext at philasd.org> [2017-11-29 16:54]:
> All the certs are different yes.
> And I would assume it is the one generated by the Shib 3.2.1. install.

"The one" when talking about 5 different certs doesn't help, but
whatever.
The Shib IDP installer (try it out yourself on a test machine, or
point it to another base directory) generates 3 certs, IIRC, and uses
each of those twice (once in the IDP role, once in the AA role).

So noone here will be able to tell you what, whether or with whom
those certificates are being used (or had been used).

I guess you can always ask the SPs you exchanged metadata with (i.e.,
the ones you have local metadata for, or are pulling metadata from)
what metadata (and therefore: certs) they have on record for your IDP.

-peter


More information about the users mailing list