Scriptable DataSealerKeyStrategy Question

[Snyder, Bill]

Hi,

I’m trying to backport the changes that are part of https://issues.shibboleth.net/jira/browse/JSPT-87 to the current release version with the goal of phasing this out once version 4.0 is released.  While I have to include the changes made in this commit (https://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=c235024c26e507a36baa12cbca1e1ba70da04636) I’m trying to avoid making any custom changes to the idp-conf/src/main/resources/system/conf/global-system.xml file as part of my solution.  Therefore, can someone please provide guidance on the best place to define the bean that needs to be specified as a property in idp-conf/src/main/resources/conf/idp.properties?  Along those lines, I’m assuming the class for that bean should be set to “net.shibboleth.utilities.java.support.security.impl.ScriptedKeyStrategy“ and that we should be passing in parameters to that bean in its definition.  I have looked but have not found an example of doing this (I have seen the test harness).  Am I misunderstanding how this is ultimately supposed to be used?  If not, is there a complete example somewhere showing the bean definition, the corresponding script, as well as where to place that script?

Thanks,
Bill
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20191015/d3e617cc/attachment.html>