OpenSAML user discussion

[Paul Hethmon <>]

Pretty sure you'll have to validate the certificate separately for
expiration date. You definitely will if you want to check the certificate
chain since that's out of scope of SAML.

On 4/28/11 10:35 AM, "Gina Choi" 
<>
 wrote:

>I extracted singing certificate from Identity Provider and installed it
>in the
>relying party. I used the following code to validate the signature. Does
>signatureValidator.validate(signature) also validate the expiration date
>of
>the certificate or I have to write my own code to check if the
>certificate is
>expired?
>