CDS v1.2.0 Released

Chad La Joie lajoie at itumi.biz
Wed Mar 14 12:02:26 GMT 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The Shibboleth Centralized Discovery Service, version 1.2.0, has been
released and is available from the download site[1].

This release includes enhancements to the metadata (re)loading
mechanism bringing it in line with most of the features supported by
the IdP including the validUntil and signature verification checks.

In addition, the example JSPs now use the OWASP ESAPI[2] tag libraries
in order to ensure proper encoding of all the data retrieved from
metadata.

Deployers are strongly encourage to update as soon as possible to
avoid any issues related to improper encoding of the aforementioned
content.

[1] http://shibboleth.net/downloads/centralized-discovery-service/latest
[2] https://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API

- -- 
Chad La Joie
www.itumi.biz
trusted identities, delivered
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBAgAGBQJPYIjRAAoJEKCzywnSs3NTZQgP/3a0Zm5pcRZ43dm7YmkoGqyU
0U+Q4GASB6QqYArCRrLvHGWaLSnNeOVsRbtOhDhvPxgObXYl9T1SPWLLJUDZHRZg
C8o5lrAVhrkoeNfoFtISYsmh1tEw/kI6pnP9vJ89k/ExAPAp6OrNBB9cvTZoshmN
v6feKHFdAKS2l0O/ELmBNjw83G7dHCyYinjYQhKVXeXIAI1W77DZl4nYgxnS0BGF
5XA16rIU599PShI7rnaxFhJvtWrw0IaNR7kSTjMT95B+mc11fu4iIoC29b22KXcJ
CjkFFUhFd8otGtvz38EJuH+kp1GKJZ6u1yeXE/G74yWVSq8zyZrmgCTBJKuMN1hW
sgqi+Dp2BMvmo8N3d/hzvuz/D3Ds6eting/ywpjHDbpMwwR+JmGIvDxYglai6hRl
xDbWlcUtafuUwCXq62zYeJj5GfXJYJGBUKi73sIiBX3LMoAnRP8wxxgmPWm4iQgb
sRHkDZCl3MiJtJtJnJKHZJSH+Yodx3xpZCqOGqZ0Kp+VZxGAXBIkENcXONU6ToBD
ylQIR8sWHwA4qN+G4MTdfSh0Fe4YXs2AANoJEuVbiS6HiG5GM8PmAonpHqzx6ZCu
XqEUMcEyuLLik2LdsnAeVXbRBsbK3BA1lhpyiVGYydrQoTZqOY2ViqqolW2Da3wB
OhmbyE6HHXka+qPylE3L
=yg6w
-----END PGP SIGNATURE-----


More information about the announce mailing list