Uploaded image for project: 'OpenSAML - C++'
  1. OpenSAML - C++
  2. CPPOST-74

metadata provider should check validity before replacing old metadata

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.4.3
    • Fix Version/s: 2.5.0
    • Component/s: Metadata
    • Labels:
      None
    • Operating System:
      Multiple
    • CPU Type:
      Multiple
    • C/C++ Compiler:
      Multiple
    • Web Server:
      Multiple

      Description

      The SP currently accepts metadata from a remote publisher for use prior to checking validUntil. This means that if for some reason it is exposed to expired metadata then it will replace previously downloaded metadata even though it is still valid.

      It would be better to perform the validUntil check (and other similar checks which might cause an aggregate to be largely rejected) before replacing previously downloaded metadata.

        Attachments

          Activity

            People

            Assignee:
            cantor.2@osu.edu Scott Cantor
            Reporter:
            ian@iay.org.uk Ian Young
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 20 minutes
                20m