AFAIK it accepts anything - but the cert *has* to be embedded.
If in doubt the logs will tell you what it is whining about...
----- Original Message -----
From: "Alistair Young" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Sunday, August 30, 2009 7:29 AM
Subject: testshib certs
> sorry, me again!
> does testshib accept any old cert for a secure AA connection from an
> SP? It seems to reject self signed certs or certs from certain CAs.
> Cybertrust is fine. Just wondering if it has the same rules as fed
> mov eax,1
> mov ebx,0
> int 80h