{"action":"created","issue":{"url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/issues/179","labels_url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/issues/179/labels{/name}","comments_url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/issues/179/comments","events_url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/issues/179/events","html_url":"https://github.com/simplesamlphp/simplesamlphp/pull/179","id":57847973,"number":179,"title":"Add metadata signature verification by using pub key from certificate","user":{"login":"s-hal","id":6792832,"avatar_url":"https://avatars.githubusercontent.com/u/6792832?v=3","gravatar_id":"","url":"https://api.github.com/users/s-hal","html_url":"https://github.com/s-hal","followers_url":"https://api.github.com/users/s-hal/followers","following_url":"https://api.github.com/users/s-hal/following{/other_user}","gists_url":"https://api.github.com/users/s-hal/gists{/gist_id}","starred_url":"https://api.github.com/users/s-hal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/s-hal/subscriptions","organizations_url":"https://api.github.com/users/s-hal/orgs","repos_url":"https://api.github.com/users/s-hal/repos","events_url":"https://api.github.com/users/s-hal/events{/privacy}","received_events_url":"https://api.github.com/users/s-hal/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/labels/enhancement","name":"enhancement","color":"bfe5bf"},{"url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/labels/metadata","name":"metadata","color":"bfd4f2"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-02-16T20:27:54Z","updated_at":"2015-03-22T11:27:42Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/pulls/179","html_url":"https://github.com/simplesamlphp/simplesamlphp/pull/179","diff_url":"https://github.com/simplesamlphp/simplesamlphp/pull/179.diff","patch_url":"https://github.com/simplesamlphp/simplesamlphp/pull/179.patch"},"body":"Added the ability to verify the metadata signature with a certificate file. I added the functionality to both the cli and the automatic metarefresh module. It is possible to use more than one certificate to handle key rollover."},"comment":{"url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/issues/comments/84588943","html_url":"https://github.com/simplesamlphp/simplesamlphp/pull/179#issuecomment-84588943","issue_url":"https://api.github.com/repos/simplesamlphp/simplesamlphp/issues/179","id":84588943,"user":{"login":"s-hal","id":6792832,"avatar_url":"https://avatars.githubusercontent.com/u/6792832?v=3","gravatar_id":"","url":"https://api.github.com/users/s-hal","html_url":"https://github.com/s-hal","followers_url":"https://api.github.com/users/s-hal/followers","following_url":"https://api.github.com/users/s-hal/following{/other_user}","gists_url":"https://api.github.com/users/s-hal/gists{/gist_id}","starred_url":"https://api.github.com/users/s-hal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/s-hal/subscriptions","organizations_url":"https://api.github.com/users/s-hal/orgs","repos_url":"https://api.github.com/users/s-hal/repos","events_url":"https://api.github.com/users/s-hal/events{/privacy}","received_events_url":"https://api.github.com/users/s-hal/received_events","type":"User","site_admin":false},"created_at":"2015-03-22T11:27:42Z","updated_at":"2015-03-22T11:27:42Z","body":"•\tThat is correct, the certificate are not validated nor is the expiration date checked\r\n\r\n•\tI am pro that certificate-based verification should take precedence. I will make the changes.\r\n"}}