Custom certificates for IDP

[Cantor, Scott]

On 6/25/15, 9:22 AM, "users on behalf of Chris Phillips" <users-bounces at shibboleth.net on behalf of Chris.Phillips at canarie.ca> wrote:



>If you are referring how to migrate keys from an old 2.x install to a 3.x install, this is the process we followed:

That's certainly accurate if you don't just perform an upgrade in place, which will automatically avoid changing any of your keys.

I realize that in a lot of upgrade scenarios, it's better to start "fresh", but honestly I think that's not true here. There are only a handful of files really carried over from V3 and it's easier I think to just move them forward initially, get things working, and then gradually freshen/migrate than to try and retroactively change a new install to do what an old one does.

-- Scott