Trouble with signature filter skipping

[Cantor, Scott]

On 9/10/18, 7:43 AM, "users on behalf of Guillaume Rousse" <users-bounces at shibboleth.net on behalf of guillaume.rousse at renater.fr> wrote:

> What am I doing wrong ?

No idea, the setting works fine AFAIK.

> As a side note, I also tried adding more virtual CPUs (from 2 to 4), as 
> it seems to be the resource bottleneck here. However, I didn't see any 
> notable progress, probably because of non-parallelizable code :(

You can't parallelize XML c14n and that's the bottleneck. The fix is, as it has been for years, to move to on demand metadata.

-- Scott