IdP DANE Trust Engine Extension - Can't load credentials
Christoffer Holmstedt
christoffer.holmstedt at gmail.com
Tue May 22 08:44:47 BST 2012
Hi
I posted a few days ago about me and my friend's Bachelor Thesis about
combining DANE with identity federations and a "proof-of-concept" for
the shibboleth identity provider 2.3.6. I'm sending this email now
because we're stuck at getting the initial extension loading properly
with shibboleth. We started out from scratch first on a new extension
but soon realized that to copy a currently working Trust Engine and
then modifying it would perhaps be easier because of no previous
knowledge with Shibboleth code. We decided to copy the "Static
Explicit Key Signature Trust Engine" cause it seemed to have some
similarities with what we wanted to do.
Our problem now is that our extension fails when trying to compare
local credentials with the one supplied in our metadata but the built
in Static Explicit Key Signature Trust Engine works just fine. It
seems like the local credentials aren't loaded to our extension
properly.
1) Have we made any wrong assumptions about being able to copy a
built-in trust engine and try to turn it into an extension that we
later on can modify?
2) At our "gist" [3] I've posted the complete log from tomcat boot-up
(idp-process.log) as well as only the error messages in a separate
"file" below.
Any help is appreciated. The code available in the github repository
is merely a copy of the static explicit key signature trust engine
with added log.debug messaged for us trying to understand it better.
3) As the extension in it's current state is merely a copy of an
already existing trust engine we could scratch it and start over from
another extension, any suggestions on this one?
Our code is available at the following locations [1,2] and [3] is
where our log files are shown as well as relying-party.xml.
[1] https://github.com/christofferholmstedt/shibIdPextension/blob/temp/cleanUp/src/main/java/se/danetest/shibboleth/extension
[2] https://github.com/christofferholmstedt/shibIdPextension/tree/temp/cleanUp/src/main/resources
[3] https://gist.github.com/2767163
Best Regards
--
Christoffer Holmstedt
More information about the dev
mailing list