From ad7f1bf5f70a0362401e6bc6df29691d913260e9 Mon Sep 17 00:00:00 2001 From: cantor Date: Thu, 20 May 2004 18:19:57 +0000 Subject: [PATCH] I screwed up the commands I sent to Nate. git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@1057 ab3bd59b-922f-494d-bb5f-6f0a3c29deca --- doc/InQueue.html | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/doc/InQueue.html b/doc/InQueue.html index d4acfac..242c8b5 100644 --- a/doc/InQueue.html +++ b/doc/InQueue.html @@ -285,8 +285,8 @@ appropriate set of trusted roots for the issuance of SSL certificates that Shibboleth trusts. For InQueue, this list may be obtained from http://wayf.internet2.edu/InQueue/ca-bundle. - crt. This list should then be copied for http://wayf.internet2.edu/InQueue/ca-bundle.crt. + This list should then be copied for mod_ssl, which will typically need to be to /conf/ssl.crt/ca-bundle.crt. This @@ -314,7 +314,7 @@
4.c. Refreshing Federation Metadata:
-

Shibboleth 1.2 includes metadata both for origin sites +

Shibboleth 1.2 includes new metadata both for origin sites and for target sites. The origin has the metadatatool and the target uses @@ -333,11 +333,11 @@ and has a fingerprint of:

b4 42 6c 1e 8b 7d 8e b3 68 03 00 e4 c4 57 dd 74 89 f8 9a 80.

-

The following commands can be used to obtain the federation's metadata for a Shibboleth target:

+

The following commands can be used to obtain the federation's metadata for a Shibboleth 1.2 target:

$ cd /opt/shibboleth/etc/shibboleth
- $ ../../bin/siterefresh --url http://wayf.internet2.edu/InQueue/sites-1.2.xml --out sites.xml --cert inqueue.pem
- $ ../../bin/siterefresh --url http://wayf.internet2.edu/InQueue/trust-1.2.xml --out trust.xml --cert inqueue.pem
+ $ ../../bin/siterefresh --url http://wayf.internet2.edu/InQueue/IQ-sites.xml --out IQ-sites.xml --cert inqueue.pem
+ $ ../../bin/siterefresh --url http://wayf.internet2.edu/InQueue/IQ-trust.xml --out IQ-trust.xml --cert inqueue.pem

The origin metadatatool's operation is greatly simplified @@ -347,9 +347,7 @@ class="fixed">metadatatool. After this has been done, the following commands can be used to obtain the federation's metadata for a Shibboleth origin:

-
metadatatool -i http://wayf.internet2.edu/InQueue/sites-1.2.xml \ -k inqueue.jks -a inqueue
- metadatatool -i http://wayf.internet2.edu/InQueue/trust-1.2.xml \ - -k inqueue.jks -a inqueue +
metadatatool -i http://wayf.internet2.edu/InQueue/IQ-sites.xml -o IQ-sites.xml -k inqueue.jks -a inqueue
-- 1.7.10.4