Use signing key on HSM to sign assertions

[ofaklintrafo]

Yes I know about this thread in the archive. It was initiated by me and the
topic was the general HSM integration between a HSM and the Shibboleth IdP.

Now I am ask more specifically about which configurations/customizations are
required to integrate to an HSM only to perform the assertion signing.

Basically I would like to customized the code/bean which does the assertion
signing. This bean I would then customize to perform this signing using the
private key on a HSM.

The question is what configuration changes are required to only replace the
functionality which does the assertion signing? Which bean/beans need to be
customized ? 




--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html