[JIRA] Commented: (SSPCPP-378) Request for customisation of certificate name at install-time

[Scott Cantor (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-378?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14105#comment-14105 ] 

Scott Cantor commented on SSPCPP-378:
-------------------------------------

Outside of Windows, the packaging systems don't allow for it, so there's no option to do it anywhere else.

Using an Advanced button would work, but I think having a GUI for this is quite optional. It isn't something you'd need past the first install, no, the keygen script alone can handle that.

By "fail", do you mean the installer itself, or just the resulting install not being fully working? I don't care about the latter. Buyer beware. That's why not having it in the GUI seemed like a good compromise.

> Request for customisation of certificate name at install-time
> -------------------------------------------------------------
>
>                 Key: SSPCPP-378
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-378
>             Project: Shibboleth SP - C++
>          Issue Type: Sub-task
>          Components: Installation / Packaging
>    Affects Versions: 2.4.2
>         Environment: Windows Server 2003, Windows Server 2008, Windows Server 2008R2
>            Reporter: 2hdjd+n3ax0o7ymuettgwna8+hk=@https://registry.shibboleth.ox.ac.uk/idp
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 2.5
>
>   Original Estimate: 1 day
>  Remaining Estimate: 1 day
>
> When installing the Shibboleth SP software on a Windows Server machine the MSI installer appears to use the host name when generating the self-signed certificate.
> It would be nice to to be able to provide an alternative name for the self-signed certificate's Issuer, Subject, and Subject Alternative Name fields at installation time. In this way the user installing the SP could use a service name consistently for the entity Id, the address for the service, and in the certificate.
> As a member of an IdP-running team that needs to track down issues quickly, it helps us to guide SP installers to use consistent names.
> Thanks for considering this.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira