Upgrade Docker Image to Shibboleth 4

[Julien Cochennec]

Thanks a lot Ian,

I found all I needed in the link you prvided, I used this project 
https://github.com/mitreid-connect/json-web-key-generator to generate 
files in credentials.

To build this project with a temp docker container :

docker run -it --rm --name my-maven-project -v $PWD:/usr/src -w /usr/src 
maven:3.6.3-openjdk-14-slim mvn package

To generate files in credentials and then put it in the credentials conf 
folder of shibboleth home folder :

java -jar json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar 
-t EC -c P-256 -a ES256 -u sig -i oidcKeyES | tail -n +2 > 
credentials/idp-signing-es.jwk
java -jar json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar 
-t RSA -s 2048 -u sig -i oidcKeyRS | tail -n +2 > 
credentials/idp-signing-rs.jwk
java -jar json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar 
-t RSA -s 2048 -u enc -i oidcKeyRSAEncryption | tail -n +2 > 
credentials/idp-encryption-rsa.jwk


Le 07/09/2020 à 15:50, Ian Young a écrit :
>> On 2020-09-07, at 14:22, Julien Cochennec <julien.cochennec at ac-orleans-tours.fr> wrote:
>>
>> I just have two errors I don't really understand, first one is about opt/shibboleth-idp/credentials/idp-signing-rs.jwk but I found nothing about it yet.
>>
>>
>>
>> shib_idp_container   | java.io.FileNotFoundException: class path resource [opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened because it does not exist
>>
> I think this image has incorporated an OIDC extension but the documentation isn't telling you about it. (a .jwk file is a JSON Web Key, I think).
>
> I think the documentation for that extension can be found here:
>
>      https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki
>
> You're beyond the areas of my expertise here, though, so I don't think I can offer you much more assistance. Perhaps someone who has used that image will chip in?
>
>
>> shib_idp_container   | 2020-09-07 13:03:46,626 - 127.0.0.1 - ERROR [org.apache.velocity.loader:351] - ResourceManager: unable to find resource 'status.vm' in any resource loader.
>>
>
> https://wiki.shibboleth.net/confluence/display/IDP30/Troubleshooting#Troubleshooting-Error:"unabletofindresource'status.vm'"
>
> This error can be ignored.
>
>
>      -- Ian
>
>
>
>
>
-- 
Julien Cochennec
Pôle de compétences - gestion des identités

Mél julien.cochennec at ac-orleans-tours.fr
Tél 02 38 83 48 88

DSI - Rectorat d'Orléans-Tours
10 Rue Molière
45000 Orléans
www.ac-orleans-tours.fr

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20200908/38ef3cee/attachment.htm>