[JIRA] Commented: (SSPCPP-378) Request for customisation of certificate name at install-time

[Scott Cantor (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-378?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14082#comment-14082 ] 

Scott Cantor commented on SSPCPP-378:
-------------------------------------

I'm thinking we don't want the typical user to see a dialog for these options because that will just lead to questions. So I see this as a candidate for people using more advanced deployment tools if we can make the MSI friendly to that, and having command line options to set properties in the installer to override the certificate options seems like a good way to go.

> Request for customisation of certificate name at install-time
> -------------------------------------------------------------
>
>                 Key: SSPCPP-378
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-378
>             Project: Shibboleth SP - C++
>          Issue Type: Improvement
>          Components: Installation / Packaging
>    Affects Versions: 2.4.2
>         Environment: Windows Server 2003, Windows Server 2008, Windows Server 2008R2
>            Reporter: 2hdjd+n3ax0o7ymuettgwna8+hk=@https://registry.shibboleth.ox.ac.uk/idp
>            Assignee: Rod Widdowson
>            Priority: Minor
>             Fix For: 2.5
>
>   Original Estimate: 1 day
>  Remaining Estimate: 1 day
>
> When installing the Shibboleth SP software on a Windows Server machine the MSI installer appears to use the host name when generating the self-signed certificate.
> It would be nice to to be able to provide an alternative name for the self-signed certificate's Issuer, Subject, and Subject Alternative Name fields at installation time. In this way the user installing the SP could use a service name consistently for the entity Id, the address for the service, and in the certificate.
> As a member of an IdP-running team that needs to track down issues quickly, it helps us to guide SP installers to use consistent names.
> Thanks for considering this.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira