Finalizing TrustEngine config

Brent Putman putmanb at georgetown.edu
Fri Jun 20 13:16:24 EDT 2014


On 6/18/14 9:02 PM, Cantor, Scott wrote:
>
> Pending that, if you had time to look at changing the global-system
> definitions to include the usual chain of ExplicitKey and PKIX via
> metadata, that would get us past the alpha.

>From the call:  We'll defer the message handler refactoring until after
the alpha:

https://issues.shibboleth.net/jira/browse/OSJ-84
https://issues.shibboleth.net/jira/browse/OSJ-85

We'll ship the alpha with trust engine chains as Scott describes above. 
But also consider making that not the default in the 3.0 release, and
instead have multiple sets of Spring wiring controlled by properties, as
Scott had already done for the SHA1/SHA2 signing config.



More information about the dev mailing list