Remove support for certificate validation by fingerprint

simplesamlphp / saml2

SimpleSAMLphp low-level SAML2 PHP library

https://www.simplesamlphp.org

GNU Lesser General Public License v2.1

282 stars 135 forks source link

Remove support for certificate validation by fingerprint #68

Closed thijskh closed 5 years ago

thijskh commented 7 years ago

The library allows one to configure trusted certificates either in full, or with just the fingerprint. These two ways of working complicate the code significantly, while the advantage of using fingerprints seems marginal. We should therefore transition to only accept full certificates.

Discussion at https://groups.google.com/forum/#!topic/simplesamlphp-dev/MTbTGxAWniw

thijskh commented 7 years ago

See simplesamlphp/simplesamlphp#431 for the simpleSAMLphp part.