Upgrade Docker Image to Shibboleth 4

[Sami Silén]

Hi Julien, 

Yes, we already included oidc extension to the docker image like Ian mentioned. 

Using JWK is one option like you have done. Other option which we are using is to change configuration to use same %{idp.[signing|encryption].[key|cert]} variables as SAML part uses by modifying credentials-oidc.xml accordingly. 

Nice to hear that this is found useful. 

// Sami 

> Thanks a lot Ian,

> I found all I needed in the link you prvided, I used this project [
> https://github.com/mitreid-connect/json-web-key-generator |
> https://github.com/mitreid-connect/json-web-key-generator ] to generate files
> in credentials.

> To build this project with a temp docker container :

> docker run -it --rm --name my-maven-project -v $PWD:/usr/src -w /usr/src
> maven:3.6.3-openjdk-14-slim mvn package

> To generate files in credentials and then put it in the credentials conf folder
> of shibboleth home folder :

> java -jar json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar -t EC -c
> P-256 -a ES256 -u sig -i oidcKeyES | tail -n +2 >
> credentials/idp-signing-es.jwk
> java -jar json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar -t RSA
> -s 2048 -u sig -i oidcKeyRS | tail -n +2 > credentials/idp-signing-rs.jwk
> java -jar json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar -t RSA
> -s 2048 -u enc -i oidcKeyRSAEncryption | tail -n +2 >
> credentials/idp-encryption-rsa.jwk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20200908/2bf64c8e/attachment.htm>