<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Yes we are on IDP 4.1. Where can I see shibboleth.DefaultSecurityConfiguration etc now?</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Also, I just noticed that idp.properties is set to the default cert hash:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
#idp.signing.config = shibboleth.SigningConfiguration.SHA256<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
however, we currently have a 10 year old SHA1 certificate. I'm looking at supporting the old SHA1 certificate for a few days (for select relying parties) if needed when we switch over to the new SHA256 certificate.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</div>
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div id="divtagdefaultwrapper" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<div style="font-family:Tahoma; font-size:13px">---
<div><span id="ms-rterangepaste-start"></span><span style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">Roberto Ullfig - rullfig@uic.edu</span><br style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">Systems Administrator</span><br style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">Enterprise Applications & Services | Technology Solutions</span><br style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif; font-size:13px; line-height:16.003px">University of Illinois - Chicago</span>
<div><span id="ms-rterangepaste-end"></span></div>
</div>
</div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Wessel, Keith <kwessel@illinois.edu><br>
<b>Sent:</b> Tuesday, June 29, 2021 3:47 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> RE: Question about relying-party-system.xml</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.x_MsoHyperlink
{color:blue;
text-decoration:underline}
span.x_EmailStyle19
{font-family:"Calibri",sans-serif;
color:windowtext}
.x_MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="x_WordSection1">
<p class="x_MsoNormal">Roberto,</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Are you on IdP V4.1 yet? Note that the system directory is being phased out starting in that version.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Keith</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> </p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal"><b>From:</b> users <users-bounces@shibboleth.net> <b>On Behalf Of
</b>Ullfig, Roberto Alfredo<br>
<b>Sent:</b> Tuesday, June 29, 2021 3:25 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: Question about relying-party-system.xml</p>
</div>
</div>
<p class="x_MsoNormal"> </p>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">sorry, in this document:</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"><a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2Fwiki.shibboleth.net%2Fconfluence%2Fdisplay%2FIDP4%2FSecurityConfiguration*558043767feabb97faea44519fa2dc20228093ee__%3BIw!!DZ3fjg!raYHbh9UVKXQwt1r04KgjFohNI2Oo4Yu_MyUlXqWhT_6xpOKj7cwjbjv_v8eTmUB9Q%24&data=04%7C01%7Crullfig%40uic.edu%7C0df88c09a20f42cb0d6108d93b3f2e01%7Ce202cd477a564baa99e3e3b71a7c77dd%7C0%7C0%7C637605964843091584%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=KKHop6tJ4hSCP97pySljpNxUuyZ1uP3GAZ3%2BTrLLBm8%3D&reserved=0" originalsrc="https://urldefense.com/v3/__https:/wiki.shibboleth.net/confluence/display/IDP4/SecurityConfiguration*558043767feabb97faea44519fa2dc20228093ee__;Iw!!DZ3fjg!raYHbh9UVKXQwt1r04KgjFohNI2Oo4Yu_MyUlXqWhT_6xpOKj7cwjbjv_v8eTmUB9Q$" shash="NTW8oqa2HpMIY4Fnc7RPmd0GbPGjg+AOAfDfa5UD1H6goSuEcYfNOg0BJs2IkE7201BgZOuDJiZ0SdxDlh+cQRGDh9mgqSE5k9T3rmm+r15KbA+Giriq9rzMXnBXqZEE8S5MwPyKAe2dJO8YdLB50BR8f5ErOcHU0dyPtws6hY0=">https://wiki.shibboleth.net/confluence/display/IDP4/SecurityConfiguration#558043767feabb97faea44519fa2dc20228093ee</a></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">it mentions:</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">The default objects that make up these configurations are defined in system/conf/relying-party-system.xml</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">however, I don't have this file in my installation. This file does exist though:</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">/opt/shibboleth-idp/old-20200714-1326/system/conf/relying-party-system.xml</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div id="x_Signature">
<div>
<div id="x_divtagdefaultwrapper">
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-size:10.0pt; font-family:"Tahoma",sans-serif; color:black">---
</span></p>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:black">Roberto Ullfig - rullfig@uic.edu<br>
Systems Administrator<br>
Enterprise Applications & Services | Technology Solutions<br>
University of Illinois - Chicago</span><span style="font-size:10.0pt; font-family:"Tahoma",sans-serif; color:black">
</span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="x_MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="x_divRplyFwdMsg">
<p class="x_MsoNormal"><b><span style="color:black">From:</span></b><span style="color:black"> Ullfig, Roberto Alfredo<br>
<b>Sent:</b> Tuesday, June 29, 2021 3:23 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Question about relying-party-system.xml</span> </p>
<div>
<p class="x_MsoNormal"> </p>
</div>
</div>
<div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">In this document:</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div id="x_x_Signature">
<div>
<div id="x_x_divtagdefaultwrapper">
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-size:10.0pt; font-family:"Tahoma",sans-serif; color:black">---
</span></p>
<div>
<p class="x_MsoNormal" style="background:white"><span style="font-size:10.0pt; font-family:"Arial",sans-serif; color:black">Roberto Ullfig - rullfig@uic.edu<br>
Systems Administrator<br>
Enterprise Applications & Services | Technology Solutions<br>
University of Illinois - Chicago</span><span style="font-size:10.0pt; font-family:"Tahoma",sans-serif; color:black">
</span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>