Permalink
Name already in use
A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
shib-sp/README.md
Go to fileThis commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
36 lines (28 sloc)
1.53 KB
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# TIER shibboleth-sp | |
[![Build Status](https://jenkins.testbed.tier.internet2.edu/buildStatus/icon?job=docker/shib-sp/master)](https://jenkins.testbed.tier.internet2.edu/job/docker/shib-sp/master) | |
This is the TIER upstream Shibboleth SP container. | |
It is based from CentOS 7 and includes httpd, mod_ssl, and the current shibboleth SP. | |
Files you must supply/override in your downstream builds: | |
1. The SP's ***private keys and corresponding certificates*** (very important!), which can be generated in your downstream container like this: | |
> RUN /etc/shibboleth/keygen.sh -o /etc/shibboleth/ -y 10 -n sp-encrypt -f \ | |
> && /etc/shibboleth/keygen.sh -o /etc/shibboleth/ -y 10 -n sp-signing -f | |
> | |
> ...those commands generate/overwrite the following files: | |
> /etc/shibboleth/sp-encrypt-key.pem | |
> /etc/shibboleth/sp-encrypt-cert.pem | |
> /etc/shibboleth/sp-signing-key.pem | |
> /etc/shibboleth/sp-signing-cert.pem | |
2. ***/etc/httpd/conf.d/ssl.conf*** | |
> including: | |
> ServerName fqdn:port | |
> UseCanonicalName On | |
3. ***/etc/shibboleth/shibboleth2.xml*** | |
> including: | |
> entityID | |
<br /><br /> | |
***New in the 3.0 release:*** | |
* The image is based from the public CentOS7 image | |
* The TIER logging format has been implemented for shibd and httpd | |
* Everything now runs under supervisord | |
* The TIER Beacon has been implemented | |
* The file */etc/httpd/conf.d/ssl.conf* is now the default CentOS7 file | |