[java-idp-plugin-vci] branch main updated: Remove now redundant intructions

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/0b0902ea026e5d73e37fdf402bf44a1794fac65e

The following commit(s) were added to refs/heads/main by this push:
     new 0b0902e  Remove now redundant intructions
0b0902e is described below

commit 0b0902ea026e5d73e37fdf402bf44a1794fac65e
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Mon Sep 7 18:55:52 2026 +0300

    Remove now redundant intructions
---
 README.md | 45 +++++++++++----------------------------------
 1 file changed, 11 insertions(+), 34 deletions(-)

diff --git a/README.md b/README.md
index fb4c5a8..10b81ec 100644
--- a/README.md
+++ b/README.md
@@ -69,23 +69,17 @@ Requires IdP **5.2.3** or later.
 > *conf/openid-vci-oidfed.xml* into *conf/global.xml* to state this deployment as a Credential
 > Issuer in an Entity Configuration. Install them before that import, without them the IdP does
 > not start.
+>
+> If your IdP image ships released versions of the OIDC plugins, remove them with
+> `bin/plugin.sh -r` before you install the snapshots, `net.shibboleth.idp.plugin.oidc.op` and
+> `net.shibboleth.idp.plugin.oidc.config` of them. A released plugin and a snapshot of the same
+> plugin cannot live side by side.
 
 ### Installation example
 
-The plugin and its dependencies are unreleased snapshots. The most convenient way to find links
-to the latest snapshots is the
-[Shibboleth IdP and Plugins status page](https://shibboleth.net/cgi-bin/projstatus.cgi). It has
-a `Current Snapshot` column with a link to each plugin.
-
-The dependency commands below are the ones of the wiki page, without the OpenID Federation
-plugins. If you installed the dependencies by that page, the last block is the only one you
-still need.
-
-Snapshot distributions are signed with Shibboleth Jenkins' key. You may download the key from
-https://shibboleth.net/downloads/SHIBBOLETH_SNAPSHOT_PGP_KEYS and use it as the truststore.
-
-This plugin is not on the status page as it has no release. Its distribution, the signature of
-the distribution and the key that signed it are in directory *download/* of this repository:
+The dependencies are installed as the wiki page above says. What is left is this plugin, and
+it is not on the status page as it has no release. Its distribution, the signature of the
+distribution and the key that signed it are in directory *download/* of this repository:
 
 | File | Description |
 |---|---|
@@ -98,33 +92,17 @@ there is no nightly build of it, so what you install is the state of some point
 not the head of this repository. If you need something newer than that you build the plugin
 yourself.
 
-If your IdP image ships released versions of the OIDC plugins you need to remove them first. A
-released plugin and a snapshot of the same plugin cannot live side by side.
-
 <details>
-<summary>Example installation of the plugin and every dependency</summary>
+<summary>Example installation of this plugin</summary>
 
 ```bash
 cd /opt/shibboleth-idp
-wget https://shibboleth.net/downloads/SHIBBOLETH_SNAPSHOT_PGP_KEYS
-
-# Remove released versions shipped in the base image.
-bin/plugin.sh -r net.shibboleth.idp.plugin.oidc.op
-bin/plugin.sh -r net.shibboleth.idp.plugin.oidc.config
-
-# Dependencies, in this order.
-bin/plugin.sh --noCheck --truststore SHIBBOLETH_SNAPSHOT_PGP_KEYS \
-  -i https://build.shibboleth.net/maven/snapshots/net/shibboleth/oidc/oidc-common-dist/3.4.0-SNAPSHOT/oidc-common-dist-3.4.0-SNAPSHOT.tar.gz
-bin/plugin.sh --noCheck --truststore SHIBBOLETH_SNAPSHOT_PGP_KEYS \
-  -i https://build.shibboleth.net/maven/snapshots/net/shibboleth/idp/plugin/config/oidc/idp-plugin-oidc-config-dist/3.1.0-SNAPSHOT/idp-plugin-oidc-config-dist-3.1.0-SNAPSHOT.tar.gz
-bin/plugin.sh --noCheck --truststore SHIBBOLETH_SNAPSHOT_PGP_KEYS \
-  -i https://build.shibboleth.net/maven/snapshots/net/shibboleth/idp/plugin/oidc/idp-plugin-oidc-op-distribution/4.4.0-SNAPSHOT/idp-plugin-oidc-op-distribution-4.4.0-SNAPSHOT.tar.gz
 
 # Optional. The authorization code flow example uses a ScriptedAttribute and IdP 5 ships no
 # JavaScript engine. Your base image may have this already, check with 'bin/plugin.sh -l'.
 bin/plugin.sh -I net.shibboleth.idp.plugin.nashorn
 
-# This plugin. The key that signed the distribution becomes the truststore.
+# The key that signed the distribution becomes the truststore of the plugin.
 mkdir -p credentials/org.geant.shibboleth.plugin.openidvci
 wget -O credentials/org.geant.shibboleth.plugin.openidvci/truststore.asc \
   https://codeberg.org/Shibboleth/java-idp-plugin-vci/raw/branch/main/download/keys.txt
@@ -132,8 +110,7 @@ bin/plugin.sh \
   -i https://codeberg.org/Shibboleth/java-idp-plugin-vci/raw/branch/main/download/shibboleth-idp-plugin-openid-vci-0.9.0-SNAPSHOT.tar.gz
 ```
 
-Replace the dependency `-SNAPSHOT.tar.gz` urls with the dated snapshot builds from the status
-page. The last command downloads the distribution and its signature from the same directory and
+The last command downloads the distribution and its signature from the same directory and
 verifies the signature against the truststore that was written just above it, so it does not
 need `--noCheck`.
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.