<div dir="ltr"><div>Thank you so much, Keith!</div><div><br></div><div>Best,</div><div>Cathy<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, May 12, 2020 at 12:47 PM Wessel, Keith <<a href="mailto:kwessel@illinois.edu">kwessel@illinois.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Cathy,<br>
<br>
You can accomplish this by adding the –n argument to the keygen command and running it twice: once to generate the signing key pair and once to generate the encryption key pair:<br>
<br>
keygen.bat -h <a href="http://client.serviceprovider.com" rel="noreferrer" target="_blank">http://client.serviceprovider.com</a> -e <a href="https://client.serviceprovider/shibboleth" rel="noreferrer" target="_blank">https://client.serviceprovider/shibboleth</a> -y 10 -n sp-signing<br>
keygen.bat -h <a href="http://client.serviceprovider.com" rel="noreferrer" target="_blank">http://client.serviceprovider.com</a> -e <a href="https://client.serviceprovider/shibboleth" rel="noreferrer" target="_blank">https://client.serviceprovider/shibboleth</a> -y 10 -n sp-encrypt<br>
<br>
Keith<br>
<br>
From: users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> On Behalf Of Cathy Scott<br>
Sent: Tuesday, May 12, 2020 2:17 PM<br>
To: Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
Subject: Seeking command to generate separate signing and encryption keys<br>
<br>
Hello all,<br>
<br>
I'm testing Shib SP v3.1 in Windows and can't figure out how to generate a separate signing and encryption key.<br>
<br>
Previously in v2, I would use this command to generate a single keypair used for signing and encryption:<br>
keygen.bat -h <a href="http://client.serviceprovider.com" rel="noreferrer" target="_blank">http://client.serviceprovider.com</a> -e <a href="https://client.serviceprovider/shibboleth" rel="noreferrer" target="_blank">https://client.serviceprovider/shibboleth</a> -y 10<br>
<br>
Please advise what the new command is to get key="sp-signing-key.pem" certificate="sp-signing-cert.pem"/> and key="sp-encrypt-key.pem" certificate="sp-encrypt-cert.pem".<br>
<br>
Thanks,<br>
Cathy<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>