Pysaml2 Hangs Indefinitely When Fetching Remote Metadata

[jacobm-splunk]

Code Version

6.5.1

Expected Behavior

The call to fetch remote metadata should timeout as expected.

Current Behavior

In some customer network environments, the call does not timeout.

Possible Solution

Curl calls seem to timeout correctly. We likely either need a configurable timeout or a way to kill the thread that's doing the fetch at some pre-determined point (ie. the thread kills itself after some timeout). The latter is more likely to fix the issue since it's not relying on a timeout from a networking library.

Steps to Reproduce

Steps to reproduce will be difficult since it's specific to a number of customer network environments. I was never able to produce a stable reproduction unfortunately.

It's basically just attempting to fetch remote metadata and then not timing out.