<div dir="ltr">can anyone explain me why we add this code into relaying-party.xml <br><br><pre class=""> <span class=""><!-- Trust engine used to evaluate the signature on loaded metadata. --></span>
<span class=""><span class=""><security:TrustEngine</span> <span class="">id</span>=<span class="">"shibboleth.MetadataTrustEngine"</span> <span class="">xsi:type</span>=<span class="">"security:StaticExplicitKeySignature"</span><span class="">></span></span>
<span style="background-color:rgb(255,255,0)"><span class=""><span class=""><security:Credential</span> <span class="">id</span>=<span class="">"TestCredentials"</span> <span class="">xsi:type</span>=<span class="">"security:X509Filesystem"</span><span class="">></span></span></span>
<span class=""><span class=""><security:Certificate<span class="">></span></span></span>/opt/shibboleth-idp/credentials/<span style="background-color:rgb(255,255,0)">federation.crt</span><span class=""><span class=""></security:Certificate<span class="">></span></span></span>
<span style="background-color:rgb(255,255,0)"><span class=""><span class=""></security:Credential<span class="">></span></span></span></span>
<span class=""><span class=""></security:TrustEngine<span class="">><br><br></span></span></span></pre><pre class=""><span class=""><span class=""><span class="">if we can access the metadata by simple URL like this one :<br><a href="https://federation.renater.fr/test/renater-test-metadata.xml">https://federation.renater.fr/test/renater-test-metadata.xml</a><br><br></span></span></span></pre><pre class=""><span class=""><span class=""><span class="">what is the utility to verify the signature on loaded metadata .<br><br></span></span></span></pre><pre class=""><span class=""><span class=""><span class="">thank you<br></span></span></span></pre></div>