Skip to Content.
Sympa Menu

inc-ops-notifications - [InCommon NOTICE] Changing Metadata Signing Tool

Subject: InCommon Operations Notifications

List archive

[InCommon NOTICE] Changing Metadata Signing Tool


Chronological Thread 
  • From: John Krienke <>
  • To: InCommon Operations Notifications <>
  • Subject: [InCommon NOTICE] Changing Metadata Signing Tool
  • Date: Tue, 07 Sep 2010 16:40:17 -0400
  • Organization: Internet2

All,

InCommon federation operations is changing the tool we sign the metadata with. To follow our metadata change management policy of notification and testing[1], we're announcing a week of tests with the new tool, starting today. We'll switch over and sign the production metadata with the new tool on Wednesday, September 15th. Please test locally with the test metadata file available here:
http://wayf.incommonfederation.org/InCommon/InCommon-metadata-test.xml

This will not require any modifications to SP or IdP implementations. The change is internal to our Federation signing operation, and since it affects the way we issue metadata, we're committed to making sure you know about the change and can test its results.

================
Further Detail:
The current tool we use -- metadatatool[2]-- is operating just fine but is getting "long in the tooth" since it was bundled with Shib 1.3 and support for Shib 1.3 ended in June[3]. We're upgrading to use the XMLSecTool[4]. One difference between the two tools: Normalization of XML is handled differently.

Optionally, feel free to join the metadata-diff email list to receive the test metadata update notifications and DIFF comparisons[5].
================

Send comments or questions to the team at



john.

[1]
https://spaces.internet2.edu/display/InCCollaborate/Metadata+Change+Management
[2] https://spaces.internet2.edu/display/SHIB/IdPRelyingConfig
[3]
https://lists.internet2.edu/sympa/arc/shibboleth-announce/2009-02/msg00000.html
[4] https://spaces.internet2.edu/display/SHIB2/XmlSecTool
[5] http://www.incommonfederation.org/contacts.cfm also https://lists.incommon.org/sympa/arc/metadata-diff



Archive powered by MHonArc 2.6.16.

Top of Page