IdP DANE Trust Engine Extension - Can't load credentials

[Christoffer Holmstedt]

2012/5/22 Chad La Joie <lajoie at itumi.biz>:
> On Tue, May 22, 2012 at 3:44 AM, Christoffer Holmstedt
> <christoffer.holmstedt at gmail.com> wrote:
>> 1) Have we made any wrong assumptions about being able to copy a
>> built-in trust engine and try to turn it into an extension that we
>> later on can modify?
>
> I don't know, you haven't stated any assumption other than you think
> what you're doing might be similar to the static key engine.  That's
> not really an assumption that anyone can evaluate.
>

True, it was asked as a more general question. The wiki says that "Be
aware that the IdP uses the same plugin mechanism as custom extensions
do in order to provide default implementations of the extension
points. The only difference is that the files for those extensions are
included in the IdP's jars instead of a separate one for the custom
extension." [1]

I asked the question more or less to get confirmation about the above
statement from the wiki that it still holds true, but my mistake, it
was to vague.

>> 2) At our "gist" [3] I've posted the complete log from tomcat boot-up
>> (idp-process.log) as well as only the error messages in a separate
>> "file" below.
>> Any help is appreciated. The code available in the github repository
>> is merely a copy of the static explicit key signature trust engine
>> with added log.debug messaged for us trying to understand it better.
>
> There really isn't much to go on with that log.  You'll need to
> determine which credentials your trust engine is pulling in and
> attempting to use during validation.
>
>> 3) As the extension in it's current state is merely a copy of an
>> already existing trust engine we could scratch it and start over from
>> another extension, any suggestions on this one?
>
> Starting over isn't going to help because the part that is failing is
> your logic not the stuff that makes the IdP load your extension.
>

Thank you for taking the time to look in to it. It's the same
conclusion more or less that we have done.

> --
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net

[1] https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevCustomExtension
--
Christoffer Holmstedt