EncryptedKey placement configuration

[Brent Putman]

On 5/13/14 7:49 PM, Cantor, Scott wrote:
> Brent, it looks like the old IdP hardwired the key placement option on the
> SAML Encrypter class to INLINE.

Yes. I never really liked that it did that.  IIRC, I don't think Chad
wanted to expose something like that as a user-visible option.


>  I could make that an option in the profile
> action, but should we just make it part of the EncryptionConfig/Parameters
> classes so that it's just part of the rest of the options?

I was going to say yes... but I double-checked and unfortunately we
can't.  That is a SAML-specific option defined on the specialized SAML
Encrypter subclass in the saml-api module.  So in terms of module
dependencies it obviously wouldn't be visible to the config and params
interfaces/classes in xmlsec-api and xmlsec-impl.  It just doesn't go.

Off-hand the only way I could see to make it work is if we introduced
some kind of extensible config options and associated params, and some
sort of plugin mechanism on the resolvers to handle them.  But that
seems like a lot of work.

I definitely agree it should be configurable somewhere, though.  Either
on the action .. or maybe it's a SAML profile config option?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20140513/ef1f6eb0/attachment-0001.html