...
| Warning | ||
|---|---|---|
| ||
It is known that versions of simpleSAMLphp prior to version 1.11 are incompatible not compatible with SHA-2. You will need to upgrade to simpleSAMLphp 1.11 (or later) before migrating to the new production metadata aggregate. |
If you're running simpleSAMLphp 1.11 (or later), your software is compatible with SHA-2 and you can should migrate to the new production metadata aggregate at your convenience (but no later than March 29, 2014). There metadata aggregate; otherwise you should migrate to the new fallback metadata aggregate. In either case, there are two configuration changes you need to make to simpleSAMLphp's metarefresh module:
- The
srcarray element should point to the HTTP location of the new production metadata aggregate. - The
validateFingerprintarray element must reflect the fingerprint of the new signing certificate.
...