InCommon metadata support

["Kathy E. Wright" <>]

No, http://md.incommon.org/InCommon/InCommon-metadata.xml still throws the same error for version 2.4.3

Kathy

On Fri, Mar 28, 2014 at 6:26 PM, Tom Scavo <> wrote:

On Fri, Mar 28, 2014 at 6:12 PM, Kathy E. Wright <> wrote:
> This works without error:
>
> <MetadataProvider type="XML"
> url=""http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml"
> backingFilePath="incommon/InCommon-metadata.xml">
>
>              <MetadataFilter type="Signature"
> certificate="incommon/inc-md-cert.pem"/>
>
> </MetadataProvider>
>
> This gives an error:
> <MetadataProvider type="XML"
> url=""http://md.incommon.org/InCommon/InCommon-metadata-fallback.xml"
> backingFilePath="incommon/InCommon-metadata-fallback.xml">
>
>              <MetadataFilter type="Signature"
> certificate="incommon/inc-md-cert.pem"/>
>
> </MetadataProvider>
>
> WARN OpenSAML.MetadataFilter.Signature : filtering out group at root of
> instance after failed signature check: Unable to verify signature with
> supplied key(s).

Do you receive the same error if you replace

http://md.incommon.org/InCommon/InCommon-metadata-fallback.xml

with

http://md.incommon.org/InCommon/InCommon-metadata.xml

in the MetadataProvider?

Also, can you remind me what version of Shibboleth IdP you're using?

Tom