Shibboleth Developers

[Scott Cantor <>]

> if you create new builds tonite, and install a new target on shib2, 
> can you put brown into its sites.xml file, so I can test the new 
> builds tomorrow?

Yes, I'm just bringing it all together now. There's a new origin candidate up 
now with the "final" attributes, and the pieces
commented out.

I have it installed on wayf, and have tested with shib2. I put the new webapp 
in /InCommon/, so any targets you run should use 
https://wayf.internet2.edu/InCommon/WAYF to use only 1.0 origins.

I'll add Brown and Washington to the "pilot federation" sites file, since I 
assume they'll both get updated.

There are signed metadata files available at the InCommon webapp now, so 
targets will need to update their metadata. I'm still
signing with the cert in the etc/shibboleth/internet2.pem file.

$ cd /opt/shibboleth/etc/shibboleth
$ ../../bin/siterefresh --url http://wayf.internet2.edu/InCommon/sites.xml \
        --out sites.xml --cert internet2.pem
$ ../../bin/siterefresh --url http://wayf.internet2.edu/InCommon/trust.xml \
        --out trust.xml --cert internet2.pem

(You can use wget too, but it won't validate the metadata or verify the 
signature, obviously).

I'll get the target builds updated by midnight or so.

-- Scott

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--