Shibboleth Identity Provider Security Advisory [4 October 2017]

[Cantor, Scott]

On 11/15/17, 1:56 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

> An advisory cannot be a tutorial in how to configure the software but if the LDAP page needs more explanation on how to
> configure trust, then that's the best place to fix it.

I've added a TLS configuration section to the LDAP connector page. I need to review exactly what syntax the trustFile attribute can accept the certificates in before going beyond the usual "PEM in a file" assumption.
 
-- Scott