Signed IDP 2.4 Metadata

[Ian Young]

On 14 Nov 2013, at 11:59, Sam Wilson <swilsonau at gmail.com> wrote:

> I am trying to find documentation to generate signed and timestamped (validUntil) IDP metadata. I have found the SWITCH aai documentation to roughly touch on this however they do not go into detail of signing the metadata. There are some old examples using Shibboleth 1.3 however I am stubbornly trying to not use deprecated things!
> 
> Can anyone shed some light on how I can get my Shibboleth 2.4 IDP meta data to look like http://metadata.aai.switch.ch/metadata.switchaai.xml ? Am I missing a script example somewhere?

We have a couple of tools for that. The Java-based one is here:

https://wiki.shibboleth.net/confluence/display/SHIB2/XmlSecTool

There's a second one that is part of the SP distribution.

	-- Ian



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131114/0dde839e/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5943 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20131114/0dde839e/attachment.bin