Shibboleth Developers

["Scott Cantor" <>]

> however, I'm presuming that if I pointed the --cacert parm at the 
> ca-bundle file being used by mod_ssl, this should work?

Yes, if that step is earlier in the check list. It depends where the cert
came from, though. That's why this is so hard to document. "Implement SSL"
is the only thing you can say without getting very specific.

The real issue is whether you care. If you say https://, you know that the
server has to have a cert from somewhere. Maybe you should just use -k and
skip the trust check on the client.

-- Scott