Decrypting attributes on-the-fly

[Griffin Cheng [CLIB]]

Thank you all for your kind reply.

I am reading Mr. Koranda's link to writing custom plugin.  I have a question. Since Shibboleth 2.5 (the institution here is running 2.5.3) has a "sessionHook" option.  I am not sure if this would work since I am decryption the attribute value after a Shibboleth session has been created.

Also, I would resort from shelling out to decrypt (the code I post earlier is a proof-of-concept but the execution is flawed for simultaneous accesses), but I would opt for calling GPG API instead.

Sorry if I begin to sound like taking shortcut at every corner here.


Regards,


Griffin CHENG.
Telephone: 3746 0853

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20140207/9c909571/attachment.html