[java-identity-provider] 02/04: Wire default client TLS credential for HttpClient security config

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=8c4a3bc4081f1a824cdb8e55b4dad70f8603d64d

commit 8c4a3bc4081f1a824cdb8e55b4dad70f8603d64d
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Wed Sep 26 21:58:08 2018 -0400

    Wire default client TLS credential for HttpClient security config
---
 idp-conf/src/main/resources/conf/credentials.xml                 | 3 +++
 idp-conf/src/main/resources/system/conf/relying-party-system.xml | 1 +
 2 files changed, 4 insertions(+)

diff --git a/idp-conf/src/main/resources/conf/credentials.xml b/idp-conf/src/main/resources/conf/credentials.xml
index 7462879..dde530b 100644
--- a/idp-conf/src/main/resources/conf/credentials.xml
+++ b/idp-conf/src/main/resources/conf/credentials.xml
@@ -36,6 +36,9 @@
         p:certificateResource="%{idp.signing.cert}"
         p:entityId-ref="entityID" />
         
+    <!-- Your IdP's default client TLS credential, by default the same as the default signing credential. -->
+    <alias alias="shibboleth.DefaultClientTLSCredential" name="shibboleth.DefaultSigningCredential" />
+    
     <!--
     The list of ALL of your IdP's encryption credentials. By default this is just an alias
     for 'shibboleth.DefaultEncryptionCredentials'. It could be re-defined as
diff --git a/idp-conf/src/main/resources/system/conf/relying-party-system.xml b/idp-conf/src/main/resources/system/conf/relying-party-system.xml
index d2b259a..b63eaf6 100644
--- a/idp-conf/src/main/resources/system/conf/relying-party-system.xml
+++ b/idp-conf/src/main/resources/system/conf/relying-party-system.xml
@@ -150,6 +150,7 @@
         
         <property name="httpClientSecurityConfiguration">
             <bean parent="shibboleth.BasicHttpClientSecurityConfiguration"
+                p:clientTLSCredential="#{getObject('shibboleth.DefaultClientTLSCredential')}"
                 p:TLSTrustEngine-ref="#{'%{idp.trust.httpClient.tls:shibboleth.ChainingX509TrustEngine}'.trim()}" />
         </property>
         

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.