[cpp-sp] branch master updated: Remove SAML1 by default.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository cpp-sp.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=6825ce446d52263f82623490ef60183d3a719bb8

The following commit(s) were added to refs/heads/master by this push:
       new  6825ce4   Remove SAML1 by default.
6825ce4 is described below

commit 6825ce446d52263f82623490ef60183d3a719bb8
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Apr 26 09:28:06 2018 -0400

    Remove SAML1 by default.
---
 configs/shibboleth3.xml     | 9 ++++-----
 configs/win-shibboleth3.xml | 9 ++++-----
 2 files changed, 8 insertions(+), 10 deletions(-)

diff --git a/configs/shibboleth3.xml b/configs/shibboleth3.xml
index 4ecd5d5..f19ac06 100644
--- a/configs/shibboleth3.xml
+++ b/configs/shibboleth3.xml
@@ -21,8 +21,8 @@
 
     <!-- The ApplicationDefaults element is where most of Shibboleth's SAML bits are defined. -->
     <ApplicationDefaults entityID="https://sp.example.org/shibboleth"
-                         REMOTE_USER="eppn persistent-id targeted-id"
-                         cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1">
+        REMOTE_USER="eppn persistent-id targeted-id"
+        cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1">
 
         <!--
         Controls session lifetimes, address checks, cookie handling, and the protocol handlers.
@@ -37,14 +37,13 @@
                   checkAddress="false" handlerSSL="false" cookieProps="http">
 
             <!--
-            Configures SSO for a default IdP. To allow for >1 IdP, remove
+            Configures SSO for a default IdP. To properly allow for >1 IdP, remove
             entityID property and adjust discoveryURL to point to discovery service.
-            (Set discoveryProtocol to "WAYF" for legacy Shibboleth WAYF support.)
             You can also override entityID on /Login query string, or in RequestMap/htaccess.
             -->
             <SSO entityID="https://idp.example.org/idp/shibboleth"
                  discoveryProtocol="SAMLDS" discoveryURL="https://ds.example.org/DS/WAYF">
-              SAML2 SAML1
+              SAML2
             </SSO>
 
             <!-- SAML and local-only logout. -->
diff --git a/configs/win-shibboleth3.xml b/configs/win-shibboleth3.xml
index 755cc54..0e9bc3e 100644
--- a/configs/win-shibboleth3.xml
+++ b/configs/win-shibboleth3.xml
@@ -64,8 +64,8 @@
     points into to this section (or to the defaults here).
     -->
     <ApplicationDefaults entityID="https://sp.example.org/shibboleth"
-                         REMOTE_USER="eppn persistent-id targeted-id"
-                         cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1">
+        REMOTE_USER="eppn persistent-id targeted-id"
+        cipherSuites="DEFAULT:!EXP:!LOW:!aNULL:!eNULL:!DES:!IDEA:!SEED:!RC4:!3DES:!kRSA:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1">
 
         <!--
         Controls session lifetimes, address checks, cookie handling, and the protocol handlers.
@@ -80,14 +80,13 @@
                   checkAddress="false" handlerSSL="false" cookieProps="http">
 
             <!--
-            Configures SSO for a default IdP. To allow for >1 IdP, remove
+            Configures SSO for a default IdP. To properly allow for >1 IdP, remove
             entityID property and adjust discoveryURL to point to discovery service.
-            (Set discoveryProtocol to "WAYF" for legacy Shibboleth WAYF support.)
             You can also override entityID on /Login query string, or in RequestMap/htaccess.
             -->
             <SSO entityID="https://idp.example.org/idp/shibboleth"
                  discoveryProtocol="SAMLDS" discoveryURL="https://ds.example.org/DS/WAYF">
-              SAML2 SAML1
+              SAML2
             </SSO>
 
             <!-- SAML and local-only logout. -->

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.