Shibboleth Developers

["Scott Cantor" <>]

Should be good to go once somebody has any code to try them with. I guess
realistically the only thing that makes sense in this kind of KeyInfo would
be an X.509 cert, since anything else would lack a defined path validation
process.

There's a KeyInfo.getX509Certificate method, so I think it's probably enough
to just call that for the time being when the trust algorithm needs to throw
the certs into a path builder.

-- Scott