Questions about certificate expiration

[damienfournier]

Hello, thank you for this package.

I have some questions about certificate expiration management.

• If the IdP's certificate has expired, will it still work? (apparently the onelogin package does not handle this case)

• If the IdP's certificate has changed, wouldn't it be better to to automatically update it in the database from the metadata?

• what are the best practices if we change the sp certificate ? is there a way to automatically warn the idp other than the updated metadata file ?

Thanks a lot !

[mohamed-salah-tawfik]

any updates!!