Skip to Content.
Sympa Menu

shibboleth-dev - Re: testing the one-hop validation scenario

Subject: Shibboleth Developers

List archive

Re: testing the one-hop validation scenario


Chronological Thread 
  • From: Derek Atkins <>
  • To: "RL 'Bob' Morgan" <>
  • Cc: Shibboleth Design Team <>
  • Subject: Re: testing the one-hop validation scenario
  • Date: 30 May 2003 19:48:53 -0400

Ok, I can reproduce this problem here.. I'll work on it.

I wonder, with the new trust/sites metadata formats, what's the
"calist" used for anymore?

-derek

"RL 'Bob' Morgan"
<>
writes:

> I will leave the UW origin HS on shib.cac.washington.edu set up to use a
> server cert issued by the UW CA. To test with it, a target would add the
> UW site metadata to sites.xml, then add the UW CA to trust.xml in the
> KeyAuthority section corresponding to the incommon pilot, ie with all the
> other CA certs. Data below, also at
> http://staff.washington.edu/rlmorgan/shib/, where you can also find the
> password to my UW test account, "rlbob", for logging in via UW's weblogin,
> and a trust.xml and sites.xml with these included.
>
> - RL "Bob"
>
> ---
>
> UW CA cert:
>
> -----BEGIN CERTIFICATE-----
> MIIDyzCCAzSgAwIBAgIBADANBgkqhkiG9w0BAQQFADCBlDELMAkGA1UEBhMCVVMx
> CzAJBgNVBAgTAldBMSEwHwYDVQQKExhVbml2ZXJzaXR5IG9mIFdhc2hpbmd0b24x
> FDASBgNVBAsTC1VXIFNlcnZpY2VzMRcwFQYDVQQDEw5VVyBTZXJ2aWNlcyBDQTEm
> MCQGCSqGSIb3DQEJARYXaGVscEBjYWMud2FzaGluZ3Rvbi5lZHUwHhcNMDMwMjI2
> MDAzNjI3WhcNMzAwNzE0MDAzNjI3WjCBlDELMAkGA1UEBhMCVVMxCzAJBgNVBAgT
> AldBMSEwHwYDVQQKExhVbml2ZXJzaXR5IG9mIFdhc2hpbmd0b24xFDASBgNVBAsT
> C1VXIFNlcnZpY2VzMRcwFQYDVQQDEw5VVyBTZXJ2aWNlcyBDQTEmMCQGCSqGSIb3
> DQEJARYXaGVscEBjYWMud2FzaGluZ3Rvbi5lZHUwgZ8wDQYJKoZIhvcNAQEBBQAD
> gY0AMIGJAoGBALwCo6h4T44m+7ve+BrnEqflqBISFaZTXyJTjIVQ39ZWhE0B3Laf
> bbZYju0imlQLG+MEVAtNDdiYICcBcKsapr2dxOi31Nv0moCkOj7iQueMVU4E1Tgh
> YIR2I8hqixFCQIP/CMtSDail/POzFzzdVxI1pv2wRc5cL6zNwV25gbn3AgMBAAGj
> ggEpMIIBJTAdBgNVHQ4EFgQUVdfBM8b6k/gnPcsgS/VajliXfXQwgcEGA1UdIwSB
> uTCBtoAUVdfBM8b6k/gnPcsgS/VajliXfXShgZqkgZcwgZQxCzAJBgNVBAYTAlVT
> MQswCQYDVQQIEwJXQTEhMB8GA1UEChMYVW5pdmVyc2l0eSBvZiBXYXNoaW5ndG9u
> MRQwEgYDVQQLEwtVVyBTZXJ2aWNlczEXMBUGA1UEAxMOVVcgU2VydmljZXMgQ0Ex
> JjAkBgkqhkiG9w0BCQEWF2hlbHBAY2FjLndhc2hpbmd0b24uZWR1ggEAMAwGA1Ud
> EwQFMAMBAf8wMgYDVR0RBCswKYYnaHR0cDovL2NlcnRzLmNhYy53YXNoaW5ndG9u
> LmVkdS9zZXJ2ZXIvMA0GCSqGSIb3DQEBBAUAA4GBAJzYxZewlfHCMyBIUuvwFI1V
> WddBsyS+Sp2pcoPWence9C2aqVuIHFGRu25c6MwW+eB4TfSGB4vzxMghJCFWRjyf
> OgCKokC4ArghbbsbG5D04v4hG+UcQ00VMzzQ80QFlFrvOZQjtdhsII8MXWN1V272
> gTspdhggZ52qVnN5hwtD
> -----END CERTIFICATE-----
>
> ---
>
> UW HS site data:
>
> <OriginSite Name="urn:mace:incommon:pilot:washington.edu">
> <Alias>University of Washington</Alias>
> <Contact Type="technical" Name="RL 'Bob' Morgan"
>
> Email=""/>
> <HandleService
> Location="https://shib.cac.washington.edu/shibboleth/HS";
> Name="shib.cac.washington.edu"/>
> <Domain>washington.edu</Domain>
> </OriginSite>
>
>
>

--
Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
Member, MIT Student Information Processing Board (SIPB)
URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH


PGP key available

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at

http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--




Archive powered by MHonArc 2.6.16.

Top of Page