Skip to content

Validate against multiple certificates - #300

Open
theseal wants to merge 4 commits into
IdentityPython:masterfrom
theseal:jocar-poc-allow-multiple-sign-certs
Open

theseal wants to merge 4 commits into
IdentityPython:masterfrom
theseal:jocar-poc-allow-multiple-sign-certs

Conversation

@theseal

@theseal theseal commented Jun 19, 2025

Copy link
Copy Markdown
Contributor

This is needed for us when aggregating metadata in EIDAS. Will make it possible to seamlessly handle when countries changed their trust/signing certificate.

@theseal
theseal force-pushed the jocar-poc-allow-multiple-sign-certs branch from 43b357a to 18734e8 Compare June 1, 2026 11:39
@theseal
theseal force-pushed the jocar-poc-allow-multiple-sign-certs branch from 18734e8 to 3d3e238 Compare June 1, 2026 11:44
theseal and others added 2 commits August 18, 2026 11:21
Keep master's pybergshamra-based check_signature and re-apply multi-cert
support by trying each key in samlmd.parse_saml_metadata.
@theseal

theseal commented Oct 28, 2026

Copy link
Copy Markdown
Contributor Author

Even if I got this working in current PR I think we should wait with a merge until bergshamra#40 is decided. Think it's a much better fit to have the feature there than here.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant