No keys generated when installing SP 3.0.2

Reuscher, Robert rreuscher at utsystem.edu
Tue Oct 9 12:40:58 EDT 2018


We are installing our first new instance of Shibboleth SP V3. The rpm that got installed with the yum install is shibboleth-3.0.2-1.1.x86_64. The install completes, but it does not create either the /etc/shibboleth/sp-cert.pem or the /etc/shibboleth/sp-key.pem  files, so the shibd  process won't start. It fails trying to open the key file.

The (what I think is relevant) postinstall scriptlet for V2 is
# Key generation or ownership fix
cd /etc/shibboleth
if [ -f sp-key.pem ] ; then
        /usr/bin/chown shibd:shibd sp-key.pem sp-cert.pem 2>/dev/null || :
else
        /bin/sh ./keygen.sh -b -u shibd -g shibd
fi

# Fix ownership of log files (even on new installs, if they're left from an older one).
/usr/bin/chown shibd:shibd /var/log/shibboleth/* 2>/dev/null || :

The postinstall script section for V3 is
postinstall scriptlet (using /bin/sh):
/sbin/ldconfig

# Key ownership fix.
if [ -f /etc/shibboleth/sp-key.pem ] ; then
        /usr/bin/chown shibd:shibd /etc/shibboleth/sp-key.pem /etc/shibboleth/sp-cert.pem 2>/dev/null || :
fi

# Fix ownership of log files (even on new installs, if they're left from an older one).
/usr/bin/chown shibd:shibd /var/log/shibboleth/* 2>/dev/null || :

# Generate two keys on new installs.
if [ $1 -eq 1 ] ; then
        cd /etc/shibboleth
        /bin/sh ./keygen.sh -b -n sp-signing -u shibd -g shibd
        /bin/sh ./keygen.sh -b -n sp-encrypt -u shibd -g shibd
fi

since I'm not running the script (rpm does) I can't see what's happening when the postinstall script is run, but I'm not getting the two key files. I guess I could just run the two commands to generate them anyway.

Thank you,

Robert Reuscher
System Administrator
Office of Shared Information Services
The University of Texas System
4201 North State Hwy 161, Suite 200
Irving, Texas 75038
Office 469.284.7479
Follow Us: www.utsystem.edu<https://www.utsystem.edu/> | @utsystem<https://twitter.com/utsystem> | UT System Facebook<http://www.facebook.com/pages/University-of-Texas-System/198151343554844>
[horizontal-full-color-svg]


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181009/20d46c3b/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 19497 bytes
Desc: image001.png
URL: <http://shibboleth.net/pipermail/users/attachments/20181009/20d46c3b/attachment.png>


More information about the users mailing list