Include RSAKeyValue In Assertions in IDP v3
Doug Holmes
doug.holmes.42 at gmail.com
Tue Nov 8 17:53:30 EST 2016
On Tue, Nov 8, 2016 at 3:57 PM, Brent Putman <putmanb at georgetown.edu> wrote:
>
>
>> On 11/8/16 10:05 AM, Cantor, Scott wrote:
>>
>>
>> I know you need a custom SecurityConfiguration on a relying party, and
>> you'd probably need to override the SigningConfiguration slot with an
>> object with a non-default keyInfoGeneratorManager property.
>>
>
> Yes, that's pretty much the gist of it.
>
>
> If anyone really wants to give this a try in the interim, what you need to
> do is 1) replicate something like the code below from
> DefaultSecurityConfigurationBootstrap to build the KeyInfoGeneratorManager
> in Spring wiring 2) change the X509 factory to emit the KeyValue (e.g.
> equiv of x509Factory.setEmitPublicKeyValue(true)) and 3) set this manger on
> a signature signing config instance on the property keyInfoGeneratorManager.
> There's a couple of non-Java bean-y things in there, so probably need some
> use of Spring bean syntax's factoryMethod and factoryBean, etc.
>
> If this is a common need, we could look to simplify some of this with a
> custom factory bean.
Thanks folks, I will chew on this and may attempt it if I end up
learning enough about this codebase to get something like this
working.
More information about the users
mailing list