Stefan Paetow

SSphp selects the first <AuthenticatingAuthority> context when generating EPTID (or others requiring computation)

6

**Describe the bug** When a SAML response (and assertion) contains multiple `` statements, it appears that SSphp simply selects the first AA. It does not do any matching to possibly...

Improve your UNHANDLEDEXCEPTION and general error handling!

4

**Is your feature request related to a problem? Please describe.** ssPHP throws way too many UNHANDLEDEXCEPTION errors! **Describe the solution you'd like** Improve your exception handling! When required attributes are...

soap.open_soap_envelope()['body'] appears to alter contents of a SOAP message

11

Using PySAML2 v4.6.2, I am trying to build a SAML Response consumer (not necessarily a SP). I receive a message using pyCURL (attached as [xmldoc-_7bb54ec7a8a59f971b1b995206ce6a344600051f63.txt](https://github.com/IdentityPython/pysaml2/files/2473418/xmldoc-_7bb54ec7a8a59f971b1b995206ce6a344600051f63.txt) ) - I then do...

Removing old dates and adding new ones at the end shifts availability?

1

I think there seems to be a problem with dates. Let's suppose I start a Foodle with 5 dates: Monday, Tuesday, Wednesday, Thursday, Friday. Two people respond and mark 'Monday'...

Please add support for PSK functionality

4

I represent an open source community project called Moonshot (https://wiki.moonshot.ja.net) which currently relies on OpenSSL 1.0.x to work. Given that other distributions are looking at libressl (and other similar projects),...

Ok, this might be just something stupid that I am doing, but I'd appreciate your help with this. I'm trying to verify the signature of a SAML2 message. Find attached...

Default is "tls_disable_tlsv1_0=0 tls_disable_tlsv1_1=0 tls_disable_tlsv1_2=0 tls_disable_tlsv1_3=1" For example, you can change PEAP versions by passing '-o "peapver=0"' or '-o "peapver=1"'. This should also address #11 by disabling TLS 1.3 by...

https://github.com/CESNET/rad_eap_test/blob/d8aec01802d64ac7682b3417e7df3c24aacb92a8/rad_eap_test#L567 A proper PEAP test will use 'autheap=MSCHAPv2' as per documentation in the wpa_supplicant and as per eduroam's Stefan Winter. Apparently the command-line doesn't allow this, and the line above...