[java-identity-provider] branch master updated: IDP-1275 - Deferred decryption of private key

Scott Cantor cantor.2 at osu.edu
Mon Jul 30 20:32:21 EDT 2018


This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=8255db09198c98b4f8cf5c6f95343ab68c525444

The following commit(s) were added to refs/heads/master by this push:
       new  8255db0   IDP-1275 - Deferred decryption of private key
8255db0 is described below

commit 8255db09198c98b4f8cf5c6f95343ab68c525444
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Jul 30 20:31:23 2018 -0400

    IDP-1275 - Deferred decryption of private key
    
    https://issues.shibboleth.net/jira/browse/IDP-1275
    
    Allow lack of signing key to cause a fatal error.
---
 .../src/main/resources/system/flows/saml/saml-abstract-beans.xml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml b/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
index 78313c1..8117f3d 100644
--- a/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
+++ b/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
@@ -135,7 +135,8 @@
     <bean id="PopulateResponseSignatureSigningParameters"
             class="org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters" scope="prototype"
             p:configurationLookupStrategy-ref="shibboleth.SignatureSigningConfigurationLookup"
-            p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver">
+            p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver"
+            p:noResultIsError="true">
         <property name="activationCondition">
             <bean class="net.shibboleth.idp.saml.profile.config.logic.SignResponsesPredicate" />
         </property>
@@ -144,7 +145,8 @@
     <bean id="PopulateRequestSignatureSigningParameters"
             class="org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters" scope="prototype"
             p:configurationLookupStrategy-ref="shibboleth.SignatureSigningConfigurationLookup"
-            p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver">
+            p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver"
+            p:noResultIsError="true">
         <property name="activationCondition">
             <bean class="net.shibboleth.idp.saml.profile.config.logic.SignRequestsPredicate" />
         </property>
@@ -153,7 +155,8 @@
     <bean id="PopulateAssertionSignatureSigningParameters"
             class="org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters" scope="prototype"
             p:configurationLookupStrategy-ref="shibboleth.SignatureSigningConfigurationLookup"
-            p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver">
+            p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver"
+            p:noResultIsError="true">
         <property name="activationCondition">
             <bean parent="shibboleth.Conditions.OR">
                 <constructor-arg>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list