IDP expired x509 certificate validation

[fatton139]

Hi,

I have a testing IDP whose x509 certificate has expired, I would've expected some validation error to be thrown but everything seems to still be fine.

Is it intended that the devs themselves to implement this and validate the certificate?

I've tried toggling authnRequestsSigned and wantAssertionsSigned but seems to have no effect.

Thanks for all your work.

[tngan]

@fatton139 Yes, it's up to devs to implement the certificate validation for now, but I would consider it to be the feature request in the future, thanks for you input.