Download Federation Metadata

By: Wolfgang Pempe

Last week, the web server certificate for www.aai.dfn.de has been replaced with a new one from the 2. generation of the DFN-PKI. With systems where the new Root Certficate is missing, the download of the Federation Metadata via https results in a Java Exception and finally fails.

We stronlgy recommend to download the Federation Metadata via http. The validation of the XML Signature of the Metadata is safe enough.

Please refer to the examples at https://doku.tid.dfn.de/en:production.

---