AW: Shibboleth SSL certificate

[Support]

Ok, thanks

-----Ursprüngliche Nachricht-----
Von: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] Im Auftrag von Peter Schober
Gesendet: Donnerstag, 28. November 2013 13:12
An: users at shibboleth.net
Betreff: Re: Shibboleth SSL certificate

* Support <support at haw-landshut.de> [2013-11-28 13:05]:
> I did exactly this mistake to replace it in the meta data. What ist
> the best way to undo it?
> The block <X509Certificate> in the metadata file ist the  public key
> in pem format, isn't it? What is it exactly uses for and where ist the
> matching private key for?

What it is and what it is being used for:

https://wiki.shibboleth.net/confluence/display/SHIB2
->
https://wiki.shibboleth.net/confluence/display/SHIB2/UnderstandingShibboleth
->
https://wiki.shibboleth.net/confluence/display/SHIB2/Metadata
and its child page (in your case about the IdP):
https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataForIdP

To restore your IdP's metadata (assuming you didn't mess with the files in the IdP's "credentials" directory) simply copy the content of the file /opt/shibboleth-idp/credentials/idp.crt (leaving out the BEGIN and END lines themselfs) into the <ds:X509Certificate> elements in your /opt/shibboleth-idp/metadata/idp-metadata.xml

The matching private key will be in
/opt/shibboleth-idp/credentials/idp.key but the Idp will usually use the Java keystore in /opt/shibboleth-idp/credentials/idp.jks

-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net