Use signing key on HSM to sign assertions

[Tom Scavo]

On Sat, May 5, 2018 at 9:06 PM, ofaklintrafo <ofa at klintra.fo> wrote:
>
> I need to configure/modify my shibboleth IDP to use a signing key on a
> Safenet HSM to sign the assertions.
>
> I have the Safenet HSM, documentation and JCA/JCE  drivers and access to a
> Safenet HSM partition with the signing key.
>
> But what is the best way to inject this configuration into the Shibboleth
> IDP. And if I need to implement a custom bean, which interface should it
> implement and where should it be injected ?

Have you searched the archives? This thread will get you started:

https://marc.info/?t=151381710100001&r=1&w=2

Unfortunately there is no cookbook AFAIK.

Tom