RelyingPartyOverrides

Michael O Holstein michael.holstein at csuohio.edu
Tue Mar 24 13:36:37 EDT 2015


I suspect the answer to my question is along these lines ...

[conf/credentials.xml]
<!-- SHA1 credentials -->
    <bean id= "SHA1SecurityConfig"
        class="net.shibboleth.idp.profile.spring.factory.BasicX509CredentialFactoryBean"
        p:privateKeyResource="%{idp.sha1signing.key}"
        p:certificateResource="%{idp.sha1signing.cert}"
        p:entityId-ref="entityID" />

the path must be specified explicity somewhere because the keys/certs of those names are in the same location

Could not resolve placeholder 'idp.sha1signing.cert' in string value "%{idp.sha1signing.cert}"; nested exception is java.lang.IllegalArgumentException: Could not resolve placeholder 'idp.sha1signing.cert' in string value "%{idp.sha1signing.cert}"

-Thanks

Michael Holstein
Cleveland State University
________________________________________
From: users-bounces at shibboleth.net <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Tuesday, March 24, 2015 12:05 AM
To: Shib Users
Subject: Re: RelyingPartyOverrides

On 3/24/15, 3:29 AM, "Michael O Holstein" <michael.holstein at csuohio.edu>
wrote:



>I've been trying to make sense of this looking at the various classes but
>.. again the revised config from the wiki
>(https://wiki.shibboleth.net/confluence/display/IDP30/SecurityConfiguratio
>n​), again attempted verbatim, causes the following error :

I'm eyeballing it now, and I don't think you're using it verbatim. You
appear to be passing an instance of a SignatureSigningConfiguration class
into the securityConfiguration property, and that's not what the example
is doing now. That's what the example was doing before the fixes.

I also just tested it in Eclipse, and it loaded fine (though untested). So
pretty sure you have something stale from the earlier broken page.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list