signature validation failure

[Cantor, Scott]

On 4/6/22, 12:55 PM, "Bobby Lawrence" <robertl at jlab.org> wrote:

>    One more question....some background first....this SP recently underwent a key rollover a week ago. 

I'm shocked.

>    So I don’t know if the problem is that we have the wrong certificate (unlikely) or that they are signing with
> their old private key. 

Probably the latter, but unless they told you they were switching immediately you could have just jumped the gun, perhaps you should have put both keys in the metadata until they actually switched.

> Is there any way to verify this?

Given effort. I don't know if any online tool sites have converters that can switch between them, but you don't have to guess or waste the time. Put the old metadata back and check.

-- Scott