From 40be5f5fcdf3068ae33ad3c92f72ca47f3012aa1 Mon Sep 17 00:00:00 2001
From: Chris Hubing <chubing@internet2.edu>
Date: Fri, 4 Dec 2020 16:38:49 +0000
Subject: [PATCH] update secrets and binds for shib sp

---
 Workbench/docker-compose.yml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/Workbench/docker-compose.yml b/Workbench/docker-compose.yml
index 888e0de..f8d7af0 100644
--- a/Workbench/docker-compose.yml
+++ b/Workbench/docker-compose.yml
@@ -322,6 +322,8 @@ services:
     environment:
      - ENV
      - USERTOKEN
+     - SHIBBOLETH_SP_ENCRYPT_CERT=
+     - SHIBBOLETH_SP_ENCRYPT_PRIVKEY=/run/secrets/shib_sp-key.pem
     networks:
      - net
     ports:
@@ -330,6 +332,15 @@ services:
      - type: bind
        source: ./configs-and-secrets/comanage/shibboleth/shibboleth2.xml
        target: /etc/shibboleth/shibboleth2.xml
+     - type: bind
+       source: ./configs-and-secrets/comanage/httpd/host-cert.pem
+       target: /etc/pki/tls/certs/cachain.pem
+     - type: bind
+       source: ./configs-and-secrets/comanage/shibboleth/sp-cert.pem
+       target: /etc/shibboleth/sp-cert.pem
+    secrets:
+     - source: c_sp-key.pem
+       target: shib_sp-key.pem
 
 networks:
   net:    
@@ -360,7 +371,10 @@ secrets:
     file: ./configs-and-secrets/midpoint/application/keystore_password.txt    
   mp_shibboleth_sp_keys.jks:
     file: ./configs-and-secrets/midpoint/shibboleth/shibboleth_sp_keys.jks
-    
+# COmanage
+  c_sp-key.pem:
+    file: ./configs-and-secrets/comanage/shibboleth/sp-key.pem
+
 volumes:
   grouper_data:
   source_data: