Multiple certificates in SP metadata are not supported
Opened this issue · 2 comments
alranel commented
This report should be verified.
It looks like when a SP metadata has multiple certificates, spid-testenv2 rejects all AuthnRequests even if they are signed with one of those certificates. Removing the extra ones and leaving only the actually used one appears to fix the issue.
In the test case, the correct certificate was the second one listed in the metadata. So maybe spid-testenv2 is only considering the first one.
jack982 commented
Hi, I can confirm the issue: we experimented the same problem with a SP metadata that contains multiple signing certificates. As suggested, removing one of them resolved the problem.
Any estimate about the resolution?
Thanks
peppelinux commented
it could be also related to this
#325