Metadata Distribution Subcommittee of TAC

[Tom Scavo <>]

As you know, a Phase 1 implementation plan has been drafted and shared with 
TAC:

https://spaces.internet2.edu/x/5IOZAg

Related to this, we in Ops have a very specific question that weighs
heavily on this implementation plan.

Here is the command we use to sign InCommon metadata:

$ xmlsectool.sh --sign  \
 --inFile=InCommon-metadata_unsigned.xml \
 --referenceIdAttributeName ID \
 --keystore=$KS \
 --keystorePassword="$key_passwd1" \
 --keyPassword="$key_passwd1" \
 --key=$ALIAS \
 --keystoreType=jks \
 --outFile=data/InCommon-metadata.xml

Will the above command continue to work after March 29, 2014 (which is
the day the legacy CA certificate expires)?

Will the above command continue to work after May 2, 2014 (which is
the day the current signing certificate expires)?

Thanks,

Tom