Outbound HTTP proxy for metadata updates

[Peter Schober]

* Matthew Slowe <m.slowe at kent.ac.uk> [2016-08-09 13:01]:
> I've been trying to get our v3 IDP to use an upstream HTTP proxy to make
> the outbound request but it seems to be ignoring me and going direct :-(
> 
> My settings in relying-party.xml:

You might want to move your metadata config over to
metadata-providers.xml at some point:
https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration#MetadataConfiguration-V2Compatibility

> <MetadataProvider id="URLMD" xsi:type="FileBackedHTTPMetadataProvider"
>                    xmlns="urn:mace:shibboleth:2.0:metadata"
>                    metadataURL="http://metadata.ukfederation.org.uk/ukfederation-metadata.xml"
>                    proxyHost="advocate.kent.ac.uk"
>                    proxyPort="3128"
>                    backingFile="%{idp.home}/metadata/ukfederation-metadata.xml">
[...]
> </MetadataProvider>
> 
> Is this the correct place to be doing this? Is there some other switch to tickle to enable this?

At least it matches the v2 configuration:
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider#IdPMetadataProvider-FileBackedHTTPMetadataProvider
as well as v3:
https://wiki.shibboleth.net/confluence/display/IDP30/HTTPMetadataProviders#HTTPMetadataProviders-Attributes

Did you actually try it and did it work?

-peter