Shibboleth IdP 3.1.2, jetty "idp.ini" keystore passwords format

[Alan Angulo (Office365 admin)]

"file not found".
Thank you Ron!

(Now, moving on to the next challenge... finding documentation on IdP-initiated implementations...)

________________________________________
From: users <users-bounces at shibboleth.net> on behalf of Rod Widdowson <rdw at steadingsoftware.com>
Sent: Tuesday, September 29, 2015 5:10 AM
To: 'Shib Users'
Subject: RE: Shibboleth IdP 3.1.2, jetty "idp.ini" keystore passwords format

> The keystore passwords in the jetty configuration file "idp.ini" seem to
be in
> some sort of format encapsulated by curly brackets.

Actually it isn't.  It's just a string which happens to begin and end with
braces.  The easiest way to generate a sort of random string in windows is
to call into the COM subsystem.

> Can someone point me to the documentation about what type of format is
> the cleartext password supposed to be converted to (see below):

I'm not sure what you want to do, but it can be whatever you want - although
I'd eschew leading or trailing spaces which can be troublesome and may be
with Jetty.

So long as the strings match the passwords for your keystores it can be
whatever you want.  That the only reason that property is there, to allow
you to change your keystore password.

None of this is documented, yet.  I still have work out how to document our
use of someone else's code.  But IdP.ini is the only file in jetty base you
can safely touch.

> Replacing jetty.browser.keystore.password with cleartext leads to the
> following error in the "commons-daemon" log:


> Any hints will be very much appreciated.

You'll probably find more in you jetty log or your idp log, but I'll bet
that the passwords don't match.


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net