[java-identity-provider] branch main updated: Extend DataSealer customization hooks to CAS ticket sealer.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=f801142855e8f6a86f5162e8df7bf1e88fb04653

The following commit(s) were added to refs/heads/main by this push:
       new  f80114285 Extend DataSealer customization hooks to CAS ticket sealer.
f80114285 is described below

commit f801142855e8f6a86f5162e8df7bf1e88fb04653
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Jan 26 13:14:00 2021 -0500

    Extend DataSealer customization hooks to CAS ticket sealer.
---
 .../src/main/resources/net/shibboleth/idp/conf/cas-protocol-system.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/cas-protocol-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/cas-protocol-system.xml
index 737093e87..7a4bcce58 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/cas-protocol-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/cas-protocol-system.xml
@@ -20,7 +20,8 @@
 
     <bean id="encodedTicketSealer" lazy-init="true"
           class="net.shibboleth.utilities.java.support.security.DataSealer"
-          p:keyStrategy-ref="shibboleth.DataSealerKeyStrategy"
+          p:keyStrategy-ref="#{ '%{idp.sealer.keyStrategy:shibboleth.DataSealerKeyStrategy}'.trim() }"
+          p:lockedAtStartup="#{!environment.containsProperty('idp.sealer.keyStrategy') and (!environment.containsProperty('idp.sealer.storePassword') or !environment.containsProperty('idp.sealer.keyPassword')) }"
           p:encoder-ref="codec"
           p:decoder-ref="codec" />
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.