Multiple certificates in SP metadata are not supported

[alranel]

This report should be verified.

It looks like when a SP metadata has multiple certificates, spid-testenv2 rejects all AuthnRequests even if they are signed with one of those certificates. Removing the extra ones and leaving only the actually used one appears to fix the issue.

In the test case, the correct certificate was the second one listed in the metadata. So maybe spid-testenv2 is only considering the first one.

[jack982]

Hi, I can confirm the issue: we experimented the same problem with a SP metadata that contains multiple signing certificates. As suggested, removing one of them resolved the problem.
Any estimate about the resolution?

Thanks

[peppelinux]

it could be also related to this
#325