updating SP's signing cert in metadata

Peter Schober peter.schober at univie.ac.at
Fri Oct 13 05:13:48 EDT 2017

* IAM David Bantz <dabantz at alaska.edu> [2017-10-12 20:45]:
> metadata markup says the cert is for signing; can I rely on that?

Well, you could check if their messages are in fact signed.

In the past I have occasionally directly replaced old certs with new
ones once I knew the SP wasn't in fact signing and the new cert was
alteady in place and usable.

More information about the users mailing list