Jetty Quickstart with Shib IDP?
Tom Scavo
trscavo at gmail.com
Sat Nov 12 14:45:13 EST 2016
On Sat, Nov 12, 2016 at 2:21 PM, Brent Putman <putmanb at georgetown.edu> wrote:
>
> One of the biggest/slowest things that the IdP
> potentially does at start is to download large batch metadata files via HTTP
> (from your federation(s), etc). When those are sufficiently large, as they
> often are with InCommon, etc, that can take quite a long time.
>
> In IdP 3.3.0, which was just released this week, we added new support in the
> batch HTTP metadata resolvers for executing the time-consuming HTTP fetch in
> a background thread, if the backup file from a previous download is
> available on the filesystem. The backup file is still loaded in the
> foreground thread, but that doesn't require any network ops, so is much
> faster. This should usually dramatically reduce the foreground processing
> time (i.e. the startup time) when the backup file is present. This is
> enabled by default when using a FileBackedHTTPMetadataProvider. This isn't
> in the wiki docs yet, but should be there sometime next week.
Is there an option to bypass signature verification on the backup file
(as there is in the SP)? If no, do you think such an option would have
a significant effect on IdP startup time?
Tom
More information about the users
mailing list