...
| No Format |
|---|
xmlsec1 --verify --pubkey-cert-pem metadata-signing.crt example-metadata.xml |
or possibly
| No Format |
|---|
xmlsec1 --verify --id-attr:ID urn:oasis:names:tc:SAML:2.0:metadata:EntitiesDescriptor \
--pubkey-cert-pem metadata-signing.crt example-metadata.xml |
On Red Hat install via yum install xmlsec1 xmlsec1-openssl. Note that on a current RHEL5.5 system Unlicensed user additionally had to create a symlink for the openssl engine library, e.g.:
...