Skip to content
Permalink
e27f09f11e
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

shib-sp/README.md

Go to file
 
 
Cannot retrieve contributors at this time
36 lines (28 sloc) 1.53 KB
Raw Blame

TIER shibboleth-sp

Build Status

This is the TIER upstream Shibboleth SP container.

It is based from CentOS 7 and includes httpd, mod_ssl, and the current shibboleth SP.

Files you must supply/override in your downstream builds:

  1. The SP's private keys and corresponding certificates (very important!), which can be generated in your downstream container like this:
RUN /etc/shibboleth/keygen.sh -o /etc/shibboleth/ -y 10 -n sp-encrypt -f \
     && /etc/shibboleth/keygen.sh -o /etc/shibboleth/ -y 10 -n sp-signing -f

      ...those commands generate/overwrite the following files:   
                  /etc/shibboleth/sp-encrypt-key.pem   
                  /etc/shibboleth/sp-encrypt-cert.pem   
                  /etc/shibboleth/sp-signing-key.pem   
                  /etc/shibboleth/sp-signing-cert.pem
  1. /etc/httpd/conf.d/ssl.conf
including:   
 ServerName fqdn:port   
 UseCanonicalName On
  1. /etc/shibboleth/shibboleth2.xml
including:   
 entityID



New in the 3.0 release:

  • The image is based from the public CentOS7 image
  • The TIER logging format has been implemented for shibd and httpd
  • Everything now runs under supervisord
  • The TIER Beacon has been implemented
  • The file /etc/httpd/conf.d/ssl.conf is now the default CentOS7 file