[JIRA] Resolved: (SSPCPP-403) Facilitate signing Logout messages

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/SSPCPP-403?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor resolved SSPCPP-403.
---------------------------------

       Resolution: Fixed
    Fix Version/s: 2.5

http://svn.shibboleth.net/view/cpp-sp?view=revision&revision=3541

Do you have a public testbed with logout enabled that could be used to test additional logout fixes and improvements?

> Facilitate signing Logout messages
> ----------------------------------
>
>                 Key: SSPCPP-403
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-403
>             Project: Shibboleth SP - C++
>          Issue Type: Improvement
>          Components: SAML 2.0 Logout
>            Reporter: Kristof Bajnok
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 2.5
>
>
> SAML2 Single Logout Profile requires LogoutRequest and LogoutResponse messages to be signed when sent over HTTP Redirect or POST bindings. It can be achieved right now by setting signing="front" or signing="true", but it has a side effect of signing every other message (which is probably unnecessary). If it could be done implicitly (and by default), that could make deploying logout easier.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira