SP Create IdP Metadata

[Cantor, Scott]

On 3/9/15, 4:47 PM, "Mark Neidig" <mneidig at ftni.com> wrote:

>Thank you for your response.
>It seems I mislead you. I installed the certificate into the windows server, not into Shibboleth. I originally provided that bit of information to give the certificate some sort of validity.

You do not want to do that, nor will it accomplish anything.

>I have the IdP's x509.der file. But, where do I get the "base64-encoded certificate" for the metadata file's  <ds:X509Certificate> element?
>https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataForIdP

If you have a DER file, you'll have to base64 encode it to get the content of the element for the metadata. The SP includes a copy of openssl that can do that or you can find any number of utilities to do it.

The openssl utility can also convert it to PEM, and that's just base64 with the headers added.

openssl x509 -in x509.der -inform der -out x509.pem -outform pem

>Is this the following the route I should pursue?

I don't know what that is, but no.

-- Scott