<div dir="ltr"><div>Hi,</div><div><br></div><div>I want to try to enable X509 authentication on the Shibbleth IdP that I have, and I've tried to follow the information at:</div><div><br></div><div><a href="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199506319/X509AuthnConfiguration#General-Configuration">https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199506319/X509AuthnConfiguration#General-Configuration</a></div><div><br></div><div>I've run the module command as described:</div><div><br></div><div>
<span class="gmail-prismjs gmail-_2rkoglpi gmail-_1dqoglyw gmail-_1wyb1crf gmail-_k48pi7a9 gmail-_1e0c1txw gmail-_vwz4gktf gmail-_1reo1wug gmail-_o572qvpr gmail-_1eimjvyg gmail-_bfhktkvp gmail-_syaz1fxt gmail-_ect41odn gmail-_1ozdn7od gmail-_7xinn7od gmail-_t7aun7od gmail-_1v15u2gc gmail-_ilvcu2gc gmail-_m29uu2gc gmail-_17wyu2gc gmail-_pn28u2gc gmail-_gz9fu2gc gmail-_1hmyegat gmail-_vblregat gmail-_vbulegat gmail-_wozj1yev gmail-_1agb1yev gmail-_lkm81yev gmail-_tv41hkgb gmail-_1hmimyb0 gmail-_1ra01n1a gmail-_1d4j1y44 gmail-_1f8gstnw gmail-_1pzyb3bt gmail-_j1w0ww7y gmail-_13cdh2mm gmail-_15ba126e gmail-_zvy9f705 gmail-_qcxof705 gmail-_14y71a66 gmail-_j0l11wug gmail-_1weckb7n gmail-_1na21hna gmail-_1xx2grf3 gmail-_x7c815vq gmail-_lh0y15vq gmail-_1m3815vq gmail-_qk1e15vq gmail-_12l6ysn8 gmail-_uga3ysn8 gmail-_mx8b7mnp gmail-_1kr87mnp gmail-_xo19t94y gmail-_1bemt94y gmail-_nalpstnw gmail-_151dstnw gmail-_1exb1q9c gmail-_1hgu1q9c gmail-_1mgnt94y gmail-_nhket94y gmail-_h909m7j4 gmail-_scgayz1z gmail-_ipl81e17 gmail-_jeky1l04 gmail-_1gec1a66 gmail-_1gx21e5h gmail-_1ls01ule gmail-_vm2c1rh5 gmail-_12ok1rh5 gmail-_rude1ule gmail-_1q16glyw gmail-_1io6glyw gmail-_juomusic gmail-_lcwuusic gmail-_1552u2gc gmail-_12afu2gc gmail-_28ddu2gc gmail-_1i8zu2gc gmail-_12tu1a66 gmail-_zu0j1a66 gmail-_euyxusvi gmail-_cahfusvi gmail-_zhnuidpf gmail-_1amdidpf gmail-_mbgcpf9b gmail-_bu7zpf9b gmail-_131n1giz gmail-_gy101giz gmail-_1wfuwrk5 gmail-_16kzwrk5 gmail-_9kk3moej gmail-_cjus1w1g gmail-_9k2r1m30 gmail-_nhmw1m30 gmail-_yl021m30 gmail-_eiht5x2v gmail-_t9zb5x2v gmail-_mqok1w1g gmail-_3hsg1w1g gmail-_i7ngn7od gmail-_9wu1fb2s gmail-_1xcoh55r gmail-_1t361fxt gmail-_137bh55r gmail-_1k7d1fxt gmail-_97lipnps gmail-_12nh9lu1 gmail-_1g0517qg gmail-_i2ig10m5 gmail-_326z1fxt gmail-_113p131l gmail-_1n6tpnps gmail-_tgu817qg gmail-_1k47pnps gmail-_g0lx1fxt gmail-_ys4e131l gmail-_7gp8h55r gmail-_1yvq10m5 gmail-_1vww10m5 gmail-_1rju10m5 gmail-_1v0lh55r gmail-_wmyy17qg gmail-_748n17qg gmail-_1mfn17qg gmail-_1d7e17qg gmail-_p2vr17qg gmail-_19o610m5 gmail-_kxov17qg gmail-_1np517qg gmail-_m2f517qg gmail-_1b9tpnps gmail-_1tq6pnps gmail-_1rd2pnps gmail-_1pbkpnps gmail-_k3lipnps gmail-_13zt131l gmail-_2g12fb2s gmail-_k86b10m5 gmail-_b5iy131l gmail-_gti3131l gmail-_1f0gpnps gmail-_9d3e17qg gmail-_qdiapnps gmail-_72uvpnps gmail-_13dgkb7n gmail-_170714ej gmail-_1i3h1txw gmail-_1huoidpf gmail-_1a9lidpf gmail-_20bqidpf gmail-_1oggidpf gmail-_bympidpf gmail-_9nnjidpf"><code class="gmail-language-" style="white-space:pre"><span class="gmail-">bin/module.sh -t idp.authn.X509 || bin/module.sh -e idp.authn.X509</span></code></span> <br></div><div><br></div><div>and got:</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">./module.sh -t idp.authn.X509 || ./module.sh -e
idp.authn.X509<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/admin/admin.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/authn/authn.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/c14n/subject-c14n.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/saml-nameid.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/services.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/ldap.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/admin/admin.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/authn/authn.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/c14n/subject-c14n.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/saml-nameid.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/services.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">INFO<span> </span>- Including
auto-located properties in ./../conf/ldap.properties<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">Enabling idp.authn.X509...<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif""><span>
</span>edit-webapp/x509-prompt.jsp created<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif"">[OK]<span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:"Calibri","sans-serif""><span> </span></p>
<span style="font-size:11pt;font-family:"Calibri","sans-serif"">Customize edit-webapp/x509-prompt.jsp
and rebuild war to deploy.</span>
<br></blockquote><div><br></div><div>So far, I haven't added the TrustEngine as shown on that page because it sounds like that is optional(?).</div><div><br></div><div>Also, this page:</div><div><br></div><div><a href="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500577/Installation#Rebuilding-the-WAR-file">https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500577/Installation#Rebuilding-the-WAR-file</a></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Installing plugins automatically performs this step, but should you need
to rebuild the WAR file yourself, you can run the build command line
utility (<em>bin/build.sh</em> or <em>bin\build.bat</em>) from the installation directory<code class="gmail-_ca0qyh40 gmail-_u5f3m5ip gmail-_n3tdyh40 gmail-_19bvm5ip gmail-_2rko1sit gmail-_11c81u0j gmail-_1reo1wug gmail-_18m91wug gmail-_1dqoglyw gmail-_1e0c1nu9 gmail-_bfhktkvp gmail-_16d9qvcn gmail-_syaz1fxt gmail-_vwz41kw7 gmail-_1i4q1hna gmail-_o5721jtm">(idp.home</code>).
<br></blockquote><div><br></div><div>so I haven't rebuilt the WAR (yet).</div><div><br></div><div>I rebooted the IdP machine and did a test request, but the IdP seems to behaving exactly like before I performed those steps.</div><div><br></div><div>Do I have to rebuild the WAR file maybe?</div><div><br></div><div>Thanks,</div><div>Jim</div><div> <br></div></div><div id="DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><br><table style="border-top:1px solid #d3d4de"><tr><td style="width:55px;padding-top:13px"><a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank"><img src="https://s-install.avcdn.net/ipm/preview/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif" alt="" width="46" height="29" style="width: 46px; height: 29px;"></a></td><td style="width:470px;padding-top:12px;color:#41424e;font-size:13px;font-family:Arial,Helvetica,sans-serif;line-height:18px">Virus-free.<a href="https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" target="_blank" style="color:#4453ea">www.avast.com</a></td></tr></table><a href="#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2" width="1" height="1"></a></div>