„HREF Key Rollover 2020” változatai közötti eltérés

Innen: Pro-M - Oktatási Üzletág - Wiki
a (→‎Shibboleth Service Provider)
46. sor: 46. sor:
 
</syntaxhighlight>
 
</syntaxhighlight>
  
−
== SimpleSAMLphp Certificate Rollover ==  
+
== SimpleSAMLphp ==  
  
−
https://simplesamlphp.org/docs/stable/saml:keyrollover
+
<syntaxhighlight lang="php" line>
 +
 
 +
'metadata.sources' => [
 +
    ['type' => 'flatfile'], // ez a *-hosted metadata konfiguráció betöltése miatt szükséges
 +
    [
 +
        'type' => 'mdq',
 +
        'server' => 'https://mdx.eduid.hu',
 +
        /* --- */
 +
        'validateFingerprint' => '91:81:AD:2B:F1:C1:4E:47:93:A2:9D:49:34:B7:77:62:4F:2F:98:43'
 +
    ],
 +
    [
 +
        'type' => 'mdq',
 +
        'server' => 'https://mdx.eduid.hu',
 +
        /* --- */
 +
        'validateFingerprint' => 'C3:72:DC:75:4C:FA:BA:65:63:52:D9:6B:47:5B:44:7E:AA:F6:45:61'
 +
    ],
 +
],
 +
</syntaxhighlight>

A lap 2020. szeptember 7., 20:27-kori változata

Shibboleth Service Provider

https://wiki.shibboleth.net/confluence/display/SP3/MetadataProvider

XML

<MetadataProvider type="Chaining">
    <MetadataProvider type="XML" id="href-2011" url="http://metadata.eduid.hu/current/href.xml" backingFilePath="href-2011.xml">
        <MetadataFilter type="Signature" certificate="href-metadata-signer-2011.crt"/>
        <MetadataFilter type="RequireValidUntil" maxValidityInterval="864000"/>
    </MetadataProvider>
    <MetadataProvider type="XML" id="href-2020" url="http://metadata.eduid.hu/current/href.xml" backingFilePath="href-2020.xml">
        <MetadataFilter type="Signature" certificate="href-metadata-signer-2020.crt"/>
        <MetadataFilter type="RequireValidUntil" maxValidityInterval="864000"/>
    </MetadataProvider>
</MetadataProvider>

MDX

Shibboleth 3.X

<MetadataProvider type="MDQ" id="href-2015" ignoreTransport="true" baseUrl="https://mdx.eduid.hu/">
    <MetadataFilter type="Signature" certificate="mdx-test-signer-2015.crt"/>
    <MetadataFilter type="RequireValidUntil" maxValidityInterval="864000"/>
</MetadataProvider>
<MetadataProvider type="MDQ" id="href-2020" ignoreTransport="true" baseUrl="https://mdx.eduid.hu/">
    <MetadataFilter type="Signature" certificate="href-metadata-signer-2020.crt"/>
    <MetadataFilter type="RequireValidUntil" maxValidityInterval="864000"/>
</MetadataProvider>

Shibboleth 2.X

<MetadataProvider type="Dynamic" id="href-2015" ignoreTransport="true">
    <Subst>https://mdx.eduid.hu/entities/$entityID</Subst>
    <MetadataFilter type="Signature" certificate="mdx-test-signer-2015.crt"/>
</MetadataProvider>
<MetadataProvider type="Dynamic" id="href-2020" ignoreTransport="true">
    <Subst>https://mdx.eduid.hu/entities/$entityID</Subst>
    <MetadataFilter type="Signature" certificate="href-metadata-signer-2020.crt"/>
</MetadataProvider>

SimpleSAMLphp

'metadata.sources' => [
     ['type' => 'flatfile'], // ez a *-hosted metadata konfiguráció betöltése miatt szükséges
     [
         'type' => 'mdq',
         'server' => 'https://mdx.eduid.hu',
         /* --- */
         'validateFingerprint' => '91:81:AD:2B:F1:C1:4E:47:93:A2:9D:49:34:B7:77:62:4F:2F:98:43'
     ],
     [
         'type' => 'mdq',
         'server' => 'https://mdx.eduid.hu',
         /* --- */
         'validateFingerprint' => 'C3:72:DC:75:4C:FA:BA:65:63:52:D9:6B:47:5B:44:7E:AA:F6:45:61'
     ],
],