summaryrefslogtreecommitdiffstats
path: root/lib/SAML2
diff options
context:
space:
mode:
authorOlav Morken <olav.morken@uninett.no>2011-03-07 13:25:01 +0000
committerOlav Morken <olav.morken@uninett.no>2011-03-07 13:25:01 +0000
commitc65dba2f85a7913508909ec0419b26d73ac4f802 (patch)
tree6adb47a8699b18a5dfe8be5ba9c8bb7208c91712 /lib/SAML2
parentbfdbb6da9d51130bc6cf72d11cbffc7292192733 (diff)
downloadsimplesamlphp-c65dba2f85a7913508909ec0419b26d73ac4f802.zip
simplesamlphp-c65dba2f85a7913508909ec0419b26d73ac4f802.tar.gz
simplesamlphp-c65dba2f85a7913508909ec0419b26d73ac4f802.tar.bz2
SAML2_SOAPClient: Add option to disable the inclusion of client certificates.
git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2750 44740490-163a-0410-bde0-09ae8108e29a
Diffstat (limited to 'lib/SAML2')
-rw-r--r--lib/SAML2/SOAPClient.php9
1 files changed, 6 insertions, 3 deletions
diff --git a/lib/SAML2/SOAPClient.php b/lib/SAML2/SOAPClient.php
index fc1824f..15b0690 100644
--- a/lib/SAML2/SOAPClient.php
+++ b/lib/SAML2/SOAPClient.php
@@ -31,9 +31,12 @@ class SAML2_SOAPClient {
// Determine if we are going to do a MutualSSL connection between the IdP and SP - Shoaib
if ($srcMetadata->hasValue('saml.SOAPClient.certificate')) {
- $ctxOpts['ssl']['local_cert'] = SimpleSAML_Utilities::resolveCert($srcMetadata->getString('saml.SOAPClient.certificate'));
- if ($srcMetadata->hasValue('saml.SOAPClient.privatekey_pass')) {
- $ctxOpts['ssl']['passphrase'] = $srcMetadata->getString('saml.SOAPClient.privatekey_pass');
+ $cert = $srcMetadata->getValue('saml.SOAPClient.certificate');
+ if ($cert !== FALSE) {
+ $ctxOpts['ssl']['local_cert'] = SimpleSAML_Utilities::resolveCert($srcMetadata->getString('saml.SOAPClient.certificate'));
+ if ($srcMetadata->hasValue('saml.SOAPClient.privatekey_pass')) {
+ $ctxOpts['ssl']['passphrase'] = $srcMetadata->getString('saml.SOAPClient.privatekey_pass');
+ }
}
} else {
/* Use the SP certificate and privatekey if it is configured. */