Jostle and Shibboleth

[Cantor, Scott]

On 1/15/19, 4:52 PM, "users on behalf of Ullfig, Roberto Alfredo" <users-bounces at shibboleth.net on behalf of rullfig at uic.edu> wrote:

> How about /opt/xmlsectool-2.0.0/xmlsectool.sh? I've used that before but forgot about it, would that catch this
> error?

That's a signing tool. It can do XML validation as a secondary feature but that's more complex to setup than just applying a filter. You should load any hand-edited metadata from per-entity files with the LocalDynamic plugin, so applying any filter is one configuration step applying to all of them.

But if you're concerned with squeezing every last ounce of performance and want to check for errors "offline" and not inline, then xmlsectool still isn't really a tool designed for that specific job but I suppose it could.

-- Scott