fix: swap the order of metadata parameters in verifying signatures on incoming...

fix: swap the order of metadata parameters in verifying signatures on incoming messages, so the correct certificate from the SP(!) metadata is used to check the signature instead of the IDP one

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2185 44740490-163a-0410-bde0-09ae8108e29a

modules/saml/lib/IdP/SAML2.php

@@ -377,7 +377,7 @@ class sspmod_saml_IdP_SAML2 {
 		$idpMetadata = $idp->getConfig();
 		$spMetadata = $metadata->getMetaDataConfig($spEntityId, 'saml20-sp-remote');
 
-		sspmod_saml2_Message::validateMessage($idpMetadata, $spMetadata, $message);
+		sspmod_saml2_Message::validateMessage($spMetadata, $idpMetadata, $message);
 
 		if ($message instanceof SAML2_LogoutResponse) {