[java-idp-plugin-webauthn] branch main updated: JWEBAUTHN-21 - IdP does not start with a non-existing fido metadata cache file

Phil Smart philip.smart at jisc.ac.uk
Mon Sep 16 15:40:49 UTC 2024


This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=5b74a53a77d4c45dc80dd25ee67f02a9e42bd85b

The following commit(s) were added to refs/heads/main by this push:
     new 5b74a53  JWEBAUTHN-21 - IdP does not start with a non-existing fido metadata cache file
5b74a53 is described below

commit 5b74a53a77d4c45dc80dd25ee67f02a9e42bd85b
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon Sep 16 16:40:47 2024 +0100

    JWEBAUTHN-21 - IdP does not start with a non-existing fido metadata
    cache file
    
     - Replace file:/ protocol prefix with idp.home
    
    https://shibboleth.atlassian.net/browse/JWEBAUTHN-21
---
 .../idp/plugin/authn/webauthn/conf/authn/webauthn.properties      | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index 126929b..2f88a73 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -103,17 +103,17 @@ idp.authn.webauthn.supportedPrincipals = \
 
 # Enable FIDO Alliance metadata? If you want to use the metadata service, you *must* download and set the trust root and the legal blob file headers
 #idp.authn.webauthn.metadata.enabled = false
-#idp.authn.webauthn.metadata.trustRootFile = file:/
+#idp.authn.webauthn.metadata.trustRootFile = %{idp.home}/credentials/root-r3.crt
 #idp.authn.webauthn.metadata.expectedLegalHeaders = Retrieval and use of this BLOB indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/
 # Downloaded CRLs to check metadata signature revocation status.
-#idp.authn.webauthn.metadata.crls = file:/
+#idp.authn.webauthn.metadata.crls = %{idp.home}/credentials/root-r3.crl
 
 ## If you want to download the metadata from a URL when the IdP starts, you must specify a cache file (.bin) and the URL to fetch the metadata
-#idp.authn.webauthn.metadata.cacheFile = file:/
+#idp.authn.webauthn.metadata.cacheFile = %{idp.home}/metadata/fido-metadata.bin
 #idp.authn.webauthn.metadata.metadataBlobUrl = https://mds3.fidoalliance.org
 
 ## If you want to load the metadata from a file *only*, set the metadata blob file location. This will override the metadataBlobUrl property
-#idp.authn.webauthn.metadata.metadataBlobFile = file:/
+#idp.authn.webauthn.metadata.metadataBlobFile = %{idp.home}/metadata/blob-mds3.jwt
 
 #### Authentication properties
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list