Reloading local SP data sealer keys

[Wessel, Keith]

Thanks, Scott. By "every time it's used", you mean any time the SP needs to decrypt the cookie data because it's being accessed and needs to create/update/read/delete that cookie. Correct?

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Monday, October 8, 2018 12:03 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Reloading local SP data sealer keys

On 10/8/18, 12:41 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> Expires immediately?

I really have no memory of all the scenarios and interactions. If it's immediate I guess it's for a reason, possibly to expire the record or something.

> Specifically, our question is should we see the two INFO lines that we 
> saw at start-up again whenever the file changes? Second question is when does the SP look for changes to that file?

Yes, and it checks every time it's used. I doubt it's that broken, so I would be checking your timestamps and copying strategy.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net