Upgrade Docker Image to Shibboleth 4

[Julien Cochennec]

Hi Sami, thanks for your answer,

May I ask which version of the Dockerized Shibboleth SP you're using?

I saw this one https://github.com/Unicon/shibboleth-sp-dockerized that 
looks quite recent (15 months).

Have a nice day.


Le 08/09/2020 à 11:36, Sami Silén a écrit :
> Hi Julien,
>
> Yes, we already included oidc extension to the docker image like Ian 
> mentioned.
>
> Using JWK is one option like you have done. Other option which we are 
> using is to change configuration to use 
> same %{idp.[signing|encryption].[key|cert]} variables as SAML part 
> uses by modifying credentials-oidc.xml accordingly.
>
> Nice to hear that this is found useful.
>
> // Sami
>
>     Thanks a lot Ian,
>
>     I found all I needed in the link you prvided, I used this project
>     https://github.com/mitreid-connect/json-web-key-generator to
>     generate files in credentials.
>
>     To build this project with a temp docker container :
>
>     docker run -it --rm --name my-maven-project -v $PWD:/usr/src -w
>     /usr/src maven:3.6.3-openjdk-14-slim mvn package
>
>     To generate files in credentials and then put it in the
>     credentials conf folder of shibboleth home folder :
>
>     java -jar
>     json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar -t
>     EC -c P-256 -a ES256 -u sig -i oidcKeyES | tail -n +2 >
>     credentials/idp-signing-es.jwk
>     java -jar
>     json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar -t
>     RSA -s 2048 -u sig -i oidcKeyRS | tail -n +2 >
>     credentials/idp-signing-rs.jwk
>     java -jar
>     json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar -t
>     RSA -s 2048 -u enc -i oidcKeyRSAEncryption | tail -n +2 >
>     credentials/idp-encryption-rsa.jwk
>
>
>
>
-- 
Julien Cochennec
Pôle de compétences - gestion des identités

Mél julien.cochennec at ac-orleans-tours.fr
Tél 02 38 83 48 88

DSI - Rectorat d'Orléans-Tours
10 Rue Molière
45000 Orléans
www.ac-orleans-tours.fr

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20200916/8346b48b/attachment.htm>