[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/idp.properties system/conf/global-system....

[noreply at shibboleth.net]

Author: scantor
Date: Mon Jun  2 22:04:35 2014
New Revision: 6037

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6037&view=rev
Log:
Add option to suppress signing of error responses to flows.

Modified:
    trunk/idp-conf/src/main/resources/conf/idp.properties
    trunk/idp-conf/src/main/resources/system/conf/global-system.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml1/artifact-resolution-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml1/attribute-query-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml1/sso-abstract-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/artifact-resolution-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/attribute-query-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-beans.xml

Modified: trunk/idp-conf/src/main/resources/conf/idp.properties
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/idp.properties?rev=6037&r1=6036&r2=6037&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/idp.properties (original)
+++ trunk/idp-conf/src/main/resources/conf/idp.properties Mon Jun  2 22:04:35 2014
@@ -3,6 +3,9 @@
 # Xerces, use org.apache.xerces.util.SecurityManager
 #idp.xml.securityManager = org.apache.xerces.util.SecurityManager
 idp.xml.securityManager = com.sun.org.apache.xerces.internal.util.SecurityManager
+
+# Set the entityId of the IdP
+idp.entity.id = https://idp.example.org
 
 # Settings for internal AES encryption key
 idp.sealer.storeType = JCEKS
@@ -31,11 +34,11 @@
 # Set to false to disable the IdP session layer
 idp.session.enabled = true
 
-# Set the entityId of the IdP
-idp.entity.id = https://idp.example.org
-
 # Set to true to expose more detailed errors in responses to SPs
 idp.errors.detailed = false
+
+# Set to false to skip signing of SAML response messages that signal errors
+idp.errors.signed = true
 
 # Set to "shibboleth.StorageService" for server-side storage
 idp.session.StorageService = shibboleth.ClientStorageService

Modified: trunk/idp-conf/src/main/resources/system/conf/global-system.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/global-system.xml?rev=6037&r1=6036&r2=6037&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/global-system.xml (original)
+++ trunk/idp-conf/src/main/resources/system/conf/global-system.xml Mon Jun  2 22:04:35 2014
@@ -18,8 +18,9 @@
     <bean id="conversionService" class="org.springframework.context.support.ConversionServiceFactoryBean">
         <property name="converters">
             <list>
-                <bean class="net.shibboleth.ext.spring.config.DurationToLongConverter"/>
-                <bean class="net.shibboleth.ext.spring.config.StringToIPRangeConverter"/>
+                <bean class="net.shibboleth.ext.spring.config.DurationToLongConverter" />
+                <bean class="net.shibboleth.ext.spring.config.StringToIPRangeConverter" />
+                <bean class="net.shibboleth.ext.spring.config.BooleanToPredicateConverter" />
             </list>
         </property>
     </bean>

Modified: trunk/idp-conf/src/main/resources/system/flows/saml/saml1/artifact-resolution-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/saml/saml1/artifact-resolution-beans.xml?rev=6037&r1=6036&r2=6037&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/saml/saml1/artifact-resolution-beans.xml (original)
+++ trunk/idp-conf/src/main/resources/system/flows/saml/saml1/artifact-resolution-beans.xml Mon Jun  2 22:04:35 2014
@@ -47,7 +47,8 @@
         <property name="handlers">
             <util:list>
                 <!-- TODO outbound handlers -->
-                <bean class="org.opensaml.saml.common.binding.security.impl.SAMLOutboundProtocolMessageSigningHandler" scope="prototype"/>
+                <bean class="org.opensaml.saml.common.binding.security.impl.SAMLOutboundProtocolMessageSigningHandler"
+                    scope="prototype" p:signErrorResponses="${idp.errors.signed}" />
             </util:list>
         </property>
     </bean>

Modified: trunk/idp-conf/src/main/resources/system/flows/saml/saml1/attribute-query-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/saml/saml1/attribute-query-beans.xml?rev=6037&r1=6036&r2=6037&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/saml/saml1/attribute-query-beans.xml (original)
+++ trunk/idp-conf/src/main/resources/system/flows/saml/saml1/attribute-query-beans.xml Mon Jun  2 22:04:35 2014
@@ -49,7 +49,8 @@
         <property name="handlers">

[... 72 lines stripped ...]