Shibboleth SSL certificate

[Peter Schober]

* Support <support at haw-landshut.de> [2013-11-28 13:05]:
> I did exactly this mistake to replace it in the meta data. What ist
> the best way to undo it?
> The block <X509Certificate> in the metadata file ist the  public key
> in pem format, isn't it? What is it exactly uses for and where ist
> the matching private key for?

What it is and what it is being used for:

https://wiki.shibboleth.net/confluence/display/SHIB2
->
https://wiki.shibboleth.net/confluence/display/SHIB2/UnderstandingShibboleth
->
https://wiki.shibboleth.net/confluence/display/SHIB2/Metadata
and its child page (in your case about the IdP):
https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataForIdP

To restore your IdP's metadata (assuming you didn't mess with the
files in the IdP's "credentials" directory) simply copy the content of
the file /opt/shibboleth-idp/credentials/idp.crt (leaving out the
BEGIN and END lines themselfs) into the <ds:X509Certificate> elements
in your /opt/shibboleth-idp/metadata/idp-metadata.xml

The matching private key will be in
/opt/shibboleth-idp/credentials/idp.key but the Idp will usually use
the Java keystore in /opt/shibboleth-idp/credentials/idp.jks

-peter