[java-idp-plugin-webauthn] branch main updated: JWEBAUTHN-21 - IdP does not start with a non-existing fido metadata cache file
Phil Smart
philip.smart at jisc.ac.uk
Mon Sep 16 15:40:49 UTC 2024
This is an automated email from the git hooks/post-receive script.
philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=5b74a53a77d4c45dc80dd25ee67f02a9e42bd85b
The following commit(s) were added to refs/heads/main by this push:
new 5b74a53 JWEBAUTHN-21 - IdP does not start with a non-existing fido metadata cache file
5b74a53 is described below
commit 5b74a53a77d4c45dc80dd25ee67f02a9e42bd85b
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon Sep 16 16:40:47 2024 +0100
JWEBAUTHN-21 - IdP does not start with a non-existing fido metadata
cache file
- Replace file:/ protocol prefix with idp.home
https://shibboleth.atlassian.net/browse/JWEBAUTHN-21
---
.../idp/plugin/authn/webauthn/conf/authn/webauthn.properties | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index 126929b..2f88a73 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -103,17 +103,17 @@ idp.authn.webauthn.supportedPrincipals = \
# Enable FIDO Alliance metadata? If you want to use the metadata service, you *must* download and set the trust root and the legal blob file headers
#idp.authn.webauthn.metadata.enabled = false
-#idp.authn.webauthn.metadata.trustRootFile = file:/
+#idp.authn.webauthn.metadata.trustRootFile = %{idp.home}/credentials/root-r3.crt
#idp.authn.webauthn.metadata.expectedLegalHeaders = Retrieval and use of this BLOB indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/
# Downloaded CRLs to check metadata signature revocation status.
-#idp.authn.webauthn.metadata.crls = file:/
+#idp.authn.webauthn.metadata.crls = %{idp.home}/credentials/root-r3.crl
## If you want to download the metadata from a URL when the IdP starts, you must specify a cache file (.bin) and the URL to fetch the metadata
-#idp.authn.webauthn.metadata.cacheFile = file:/
+#idp.authn.webauthn.metadata.cacheFile = %{idp.home}/metadata/fido-metadata.bin
#idp.authn.webauthn.metadata.metadataBlobUrl = https://mds3.fidoalliance.org
## If you want to load the metadata from a file *only*, set the metadata blob file location. This will override the metadataBlobUrl property
-#idp.authn.webauthn.metadata.metadataBlobFile = file:/
+#idp.authn.webauthn.metadata.metadataBlobFile = %{idp.home}/metadata/blob-mds3.jwt
#### Authentication properties
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list