Jostle and Shibboleth

[Ullfig, Roberto Alfredo]

How about /opt/xmlsectool-2.0.0/xmlsectool.sh? I've used that before but forgot about it, would that catch this error?

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Architecture and Development | ACCC
University of Illinois - Chicago


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Tuesday, January 15, 2019 3:12 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Jostle and Shibboleth

On 1/15/19, 3:54 PM, "users on behalf of Ullfig, Roberto Alfredo" <users-bounces at shibboleth.net on behalf of rullfig at uic.edu> wrote:

> Where I just had <ds:KeyInfo>

Add a SchemaValidation metadata filter and it will catch those, but you had a bogus KeyInfo element being ignored, thus "missing" and effectively no key present.

The SP handles this sort of error better, but the IdP silently ignores unknown content unless it's validated.

-- Scott


-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net