Service Provider not checking for certificate expiration

[Ullfig, Roberto Alfredo]

We're running a service provider at version 3.2.3 and I noticed that if the assertions are signed with an expired certificate that the service provider will accept that - that doesn't seem right. Shouldn't the SP reject those assertions?

---
Roberto Ullfig - rullfig at uic.edu
Systems Administrator
Enterprise Applications & Services | Technology Solutions
University of Illinois - Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210720/4e39429b/attachment.htm>