Shibboleth SP library update (xmltooling v1.5.6)
Cantor, Scott
cantor.2 at osu.edu
Tue Aug 4 15:53:29 EDT 2015
An issue preventing use of PKIX validation of metadata or SAML messages when CRLs were used cropped up on newer OpenSSL versions [1] so an updated version of xmltooling (V1.5.6) has been produced to correct the bug. The bug caused a false negative (validation failed when it should succeed).
The source [2] and RPMs are now available.
A Windows service release of the SP (V2.5.5.1) will be published tomorrow to make the fixed library available. We have more testing to do before releasing it since this is the first service release done with the four-digit versioning we borrowed from the IdP installer.
-- Scott
More information about the announce
mailing list