Fix error when response has no cert but outstanding_certs is defined.

1 files changed, 7 insertions, 3 deletions

diff --git a/src/saml2/entity.py b/src/saml2/entity.py
index f9d290ee..eed8233f 100644
--- a/src/saml2/entity.py
+++ b/src/saml2/entity.py
@@ -872,9 +872,13 @@ class Entity(HTTPBase):
 
             if response:
                 if outstanding_certs:
-                    _, key_file = make_temp(
-                        "%s" % outstanding_certs[
-                            response.in_response_to]["key"], decode=False)
+                    cert = outstanding_certs[
+                        response.in_response_to]
+                    if cert:
+                        _, key_file = make_temp(
+                            "%s" % cert["key"], decode=False)
+                    else:
+                        key_file = ""
                 else:
                     key_file = ""
                 response = response.verify(key_file)