A problem with Shibboleth 3.4.x packages

[Cantor, Scott]

On 8/8/19, 10:48 AM, "users on behalf of Marco Malavolti" <users-bounces at shibboleth.net on behalf of marco.malavolti at garr.it> wrote:

> As you can see, I can create "idp-encryption" Certificate and Key (that
> I'll use into the IdP metadata) without installing Shibboleth IdP.

It doesn't matter what you "can" do by accident; you were not meant to do it and it only worked by accident. We did not support it. We can't anticipate all the things people might do that we never would have imagined somebody would try, so there was no way to prevent things we didn't think of preventing.

You cannot use anything in the distribution tree except the supported install script or whatever that happens to be in a given release. The rest of the content of the distribution is solely for the use of that script, and the content and layout can change at any time, even a patch. We do not even support using it to compare files across installs, that's why we copy in a dist/ tree after installation that contains the original files for comparison so that people don't have to depend on the original.

If we really have to, there's always the option to turn the "unpacked" tree into a packed archive and a set of files for the installer, but that's a lot of extra work simply to avoid this working by accident and it doesn't seem like a good use of time.

-- Scott