Shibboleth Developers

[Walter Hoehn <>]

On Aug 11, 2005, at 12:09 AM, David Champion wrote:

> > Actually, I don't think we expect anybody to use them anymore,  
> > with the
> > unfortunate exception of metadatatool. The real bug here is that
> > metadatatool hasn't been redone so that it can read and use PEM  
> > keys like
> > the IdP can. This was just due to time/interest.
>
> That's good to hear.  Allowing metadatatool to use PEM keys/certs  
> seems,
> in the long term, much better.  I think I'd say that JKS is just an
> obstacle to deployment.

Agreed.  I wrote extkeytool as the original solution to people's JKS  
woes.  Once I realized that it just confused people more, I converted  
the IdP to read the formats that folks seem to be used to.  This has  
greatly reduced the amount of related traffic on the list.

-Walter