<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 8/20/15 10:52 PM, Brent Putman
wrote:<br>
</div>
<blockquote cite="mid:55D69260.1060203@georgetown.edu" type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<br>
<br>
<div class="moz-cite-prefix">On 8/20/15 10:00 PM, Brent Putman
wrote:<br>
</div>
<blockquote cite="mid:55D68659.4090007@georgetown.edu" type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<br>
<br>
<tt><util:list id="shibboleth.DefaultSigningCredentials"></tt><tt><br>
</tt><tt> <bean id="shibboleth.DefaultSigningCredential"</tt><tt><br>
</tt><tt>
class="net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean"</tt><tt><br>
</tt><tt> p:privateKeyResource="%{idp.signing.key}"</tt><tt><br>
</tt><tt> p:certificateResource="%{idp.signing.cert}"</tt><tt><br>
</tt><tt> p:entityId-ref="entityID" /></tt><tt><br>
</tt><tt></util:list></tt><br>
</blockquote>
<br>
<br>
Btw, to be clear, it wouldn't probably be called
shibboleth.DefaultSigningCredentials (not -Default-), since it
needs to be all of them.<br>
</blockquote>
<br>
<br>
Hmmm, this bean syntax turns out to not work. I thought that beans
defined inside a util:list or other util: collections were still
directly referenceable by bean name as long as they carried an 'id'
attribute, but the above does not seem to work, i.e. some other
wiring of security config spits errors on start that it can't find
the bean named shibboleth.DefaultSigningCredential. I've searched
a bit, I can't find a definitive answer yet. Does anyone else
happen to know one way or another?<br>
<br>
For now, I punted and just defined the list like so, leaving the
existing credential as a "top-level" bean:<br>
<br>
<tt><br>
</tt><tt> <util:list id="shibboleth.SigningCredentials"></tt><tt><br>
</tt><tt> <ref bean="shibboleth.DefaultSigningCredential"
/></tt><tt><br>
</tt><tt> </util:list></tt><br>
<br>
<br>
I don't know, maybe that's a cleaner syntax anyway, and would be
easier for a deployer to retroactively add after an upgrade. Just
copy/paste.<br>
</body>
</html>