[java-identity-provider] branch master updated: IDP-1275 - Deferred decryption of private key
Scott Cantor
cantor.2 at osu.edu
Mon Jul 30 20:32:21 EDT 2018
This is an automated email from the git hooks/post-receive script.
scantor pushed a commit to branch master
in repository java-identity-provider.
View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=8255db09198c98b4f8cf5c6f95343ab68c525444
The following commit(s) were added to refs/heads/master by this push:
new 8255db0 IDP-1275 - Deferred decryption of private key
8255db0 is described below
commit 8255db09198c98b4f8cf5c6f95343ab68c525444
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Jul 30 20:31:23 2018 -0400
IDP-1275 - Deferred decryption of private key
https://issues.shibboleth.net/jira/browse/IDP-1275
Allow lack of signing key to cause a fatal error.
---
.../src/main/resources/system/flows/saml/saml-abstract-beans.xml | 9 ++++++---
1 file changed, 6 insertions(+), 3 deletions(-)
diff --git a/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml b/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
index 78313c1..8117f3d 100644
--- a/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
+++ b/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
@@ -135,7 +135,8 @@
<bean id="PopulateResponseSignatureSigningParameters"
class="org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters" scope="prototype"
p:configurationLookupStrategy-ref="shibboleth.SignatureSigningConfigurationLookup"
- p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver">
+ p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver"
+ p:noResultIsError="true">
<property name="activationCondition">
<bean class="net.shibboleth.idp.saml.profile.config.logic.SignResponsesPredicate" />
</property>
@@ -144,7 +145,8 @@
<bean id="PopulateRequestSignatureSigningParameters"
class="org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters" scope="prototype"
p:configurationLookupStrategy-ref="shibboleth.SignatureSigningConfigurationLookup"
- p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver">
+ p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver"
+ p:noResultIsError="true">
<property name="activationCondition">
<bean class="net.shibboleth.idp.saml.profile.config.logic.SignRequestsPredicate" />
</property>
@@ -153,7 +155,8 @@
<bean id="PopulateAssertionSignatureSigningParameters"
class="org.opensaml.saml.common.profile.impl.PopulateSignatureSigningParameters" scope="prototype"
p:configurationLookupStrategy-ref="shibboleth.SignatureSigningConfigurationLookup"
- p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver">
+ p:signatureSigningParametersResolver-ref="shibboleth.SignatureSigningParametersResolver"
+ p:noResultIsError="true">
<property name="activationCondition">
<bean parent="shibboleth.Conditions.OR">
<constructor-arg>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list