query on impact after renewal of certificate

Lipscomb, Gary glipscomb at csu.edu.au
Fri Mar 8 01:25:36 EST 2019


If my understanding is correct
  If its the website certificate Shibboleth dosn't use it and doesn't care.
  If its the certificate used for signing and or encryption Shibboleth doesn't chek the valid until so need to change.
  If you think the certificate has been compromised then it definitely needs to be changed.
Depending on how many IdP 's the new metadata needs to be refreshed on, and whether you have control of these the process is outlined in the wiki

https://wiki.shibboleth.net/confluence/display/SP3/Multiple+Credentials#MultipleCredentials-KeyRollover

regards

Gary



From: users <users-bounces at shibboleth.net> on behalf of Rohit Shinde <rohit at venturit.com>
Sent: Friday, 8 March 2019 5:00 PM
To: Shib Users
Subject: query on impact after renewal of certificate
  

Hi,
    I am the SP (Service Provider) & my SSL Certificate on EC2 instance is going to expire where shibboleth is installed & running. If I do the renewal of that certificate, will shibboleth continue to authenticate the users with IdP successfully or do  I need to generate my Metadata again and share to Idp again to make sure the users are authenticated with IdP successfully? 


 -- 




Thanks
Rohit Shinde
www.venturit.com
rohit at venturit.com
+919762688064


CONFIDENTIALITY NOTICE: The contents of this email message and any attachments are intended solely for the addressee(s) and may contain confidential and/or privileged information and may be legally protected from disclosure.  If you are not the intended recipient of this message or their agent, or if this message has been addressed to you in error, please immediately alert the sender by reply email and then delete this message and any attachments. If you are not the intended recipient,  you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibited.         


More information about the users mailing list