Shibboleth Developers

["Scott Cantor" <>]

> Does the apache-tomcat connector populate this attribute?

Yes. We used to assume the certificate was valid, leaving it up to mod_ssl.
Now we don't.

It strikes me that (and I think Chad's proposal is fine) after all that
work, it's arguably simpler to just use Apache. Actually, I will argue it,
and don't imagine I'd have any reason to stop.

It may be that tomcat is more viable if you're using validation and a small
enough anchor list to just load them.

-- Scott