Security update for signature validation
Security update for signature validation

The underlying function in "openssl_verify" returns -1 on error, which may happen (as happened for me while doing security checks) when the identity provider certificate is tampered with (for example when I substituted it with a DSA key)
In that case, -1 being true, well...
sitya/saml2,simplesamlphp/saml2