<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body>
<p>Hi Sami, thanks for your answer,<br>
</p>
<p>May I ask which version of the Dockerized Shibboleth SP you're
using?</p>
<p>I saw this one <a class="moz-txt-link-freetext" href="https://github.com/Unicon/shibboleth-sp-dockerized">https://github.com/Unicon/shibboleth-sp-dockerized</a>
that looks quite recent (15 months).</p>
<p>Have a nice day.</p>
<p><br>
</p>
<div class="moz-cite-prefix">Le 08/09/2020 à 11:36, Sami Silén a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:1461198520.3328012.1599557782710.JavaMail.zimbra@csc.fi">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
<div style="font-family: arial, helvetica, sans-serif; font-size:
10pt; color: #000000">
<div>Hi Julien,</div>
<div><br data-mce-bogus="1">
</div>
<div>Yes, we already included oidc extension to the docker image
like Ian mentioned.</div>
<div><br data-mce-bogus="1">
</div>
<div>Using JWK is one option like you have done. Other option
which we are using is to change configuration to use
same %{idp.[signing|encryption].[key|cert]} variables as SAML
part uses by modifying credentials-oidc.xml accordingly. </div>
<div><br data-mce-bogus="1">
</div>
<div>Nice to hear that this is found useful. </div>
<div><br data-mce-bogus="1">
</div>
<div>// Sami</div>
<div><br data-mce-bogus="1">
</div>
<div data-marker="__QUOTED_TEXT__">
<blockquote style="border-left:2px solid
#1010FF;margin-left:5px;padding-left:5px;color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;">
<p>Thanks a lot Ian,</p>
<p>I found all I needed in the link you prvided, I used this
project <a class="moz-txt-link-freetext"
href="https://github.com/mitreid-connect/json-web-key-generator"
target="_blank" moz-do-not-send="true">https://github.com/mitreid-connect/json-web-key-generator</a>
to generate files in credentials.</p>
<p>To build this project with a temp docker container :</p>
<p>docker run -it --rm --name my-maven-project -v
$PWD:/usr/src -w /usr/src maven:3.6.3-openjdk-14-slim mvn
package<br>
</p>
<p>To generate files in credentials and then put it in the
credentials conf folder of shibboleth home folder :<br>
</p>
<p>java -jar
json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar
-t EC -c P-256 -a ES256 -u sig -i oidcKeyES | tail -n +2
> credentials/idp-signing-es.jwk<br>
java -jar
json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar
-t RSA -s 2048 -u sig -i oidcKeyRS | tail -n +2 >
credentials/idp-signing-rs.jwk<br>
java -jar
json-web-key-generator-0.9-SNAPSHOT-jar-with-dependencies.jar
-t RSA -s 2048 -u enc -i oidcKeyRSAEncryption | tail -n +2
> credentials/idp-encryption-rsa.jwk<br>
</p>
<p><br>
</p>
<br>
</blockquote>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
<pre class="moz-signature" cols="72">--
Julien Cochennec
Pôle de compétences - gestion des identités
Mél <a class="moz-txt-link-abbreviated" href="mailto:julien.cochennec@ac-orleans-tours.fr">julien.cochennec@ac-orleans-tours.fr</a>
Tél 02 38 83 48 88
DSI - Rectorat d'Orléans-Tours
10 Rue Molière
45000 Orléans
<a class="moz-txt-link-abbreviated" href="http://www.ac-orleans-tours.fr">www.ac-orleans-tours.fr</a></pre>
</body>
</html>