Skip to Content.
Sympa Menu

metadata-support - Re: [Metadata-Support] SP configuration for new InCommon Aggregate

Subject: InCommon metadata support

List archive

Re: [Metadata-Support] SP configuration for new InCommon Aggregate


Chronological Thread 
  • From: "Cantor, Scott" <>
  • To: "" <>
  • Subject: Re: [Metadata-Support] SP configuration for new InCommon Aggregate
  • Date: Fri, 28 Mar 2014 23:03:44 +0000
  • Accept-language: en-US

On 3/28/14, 6:51 PM, "Tom Scavo"
<>
wrote:
>
>The redirect will go in place on Monday @ noon ET but in any case
>those two files are not byte-for-byte equivalent since the metadata
>signing certificate is different in each case (same signing key,
>different certificate).

I assume the digest and sig value are though. And since the cert inside
the KeyInfo isn't actually used for anything or part of the signature
computation, it can't be affecting anything that I can think of. Just
isn't physically possible unless the feed from that new host isn't making
it intact.

There needs to be a byte for byte compare of the digest inputs between the
signature computation of a failing example and a working example with the
same file. If that matches, and the SignedInfo digest octets match, then
there has to be more to the debug log indicating something else is
involved.

-- Scott





Archive powered by MHonArc 2.6.16.

Top of Page