Shibboleth Developers

[Scott Cantor <>]

I'm back in Ohio and catching up on email.

I read the origin build thread, but not the other thread on validation.

FWIW, I did test chains of CAs validating on shib2, but not exhaustively, so 
there may be issues in my code, Berin's xml-sec code,
etc.

I saw Derek's fix, and that looked reasonable.

Also, FWIW, it's very tricky getting a cert into base64 and into the trust 
file correctly. Any extra/missing linefeeds will throw
off the base64 decoder.

My sample file shows exactly how it should look as far as nestling the bits 
into the X509Certificate element.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--