Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Shibboleth Developer's Meeting, 2018-04-06

Call Administrivia

10:00 Central US / 11:00 Eastern US / 16:00 UK

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2018-04-20. Any reason to deviate from this?

60 to 90 minute call window.


Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.


AGENDA

  1. Multiple CVE reports published for the Spring Framework

Attendees:


Brent

  • SOAP Client and SAML 2 Artifact decoder
    • Lots o' progress.  It's functional now in SP testing.  Still some work remaining on TLS vs signing, plus some unit tests and other odds/ends.
    • When we ship this in 3.4, should we enable the artifact index in batch metadata resolvers now by default?  There are arguments both ways.

...

  • SP package mirroring
  • Jira Legacy
    serverShibboleth JIRA
    serverId180d847f-bce4-36b2-9964-771bff586829
    keySSPCPP-731
    , 8 hours for one missing character
  • Jira Legacy
    serverShibboleth JIRA
    serverId180d847f-bce4-36b2-9964-771bff586829
    keySSPCPP-350
  • Exploring dynamic metadata in IdP, several issues opened
  • joda-time replacement

Tom

  • Not much change since last week
    • Jetty 9.4 tests pass on Windows
    • Some Java 10 tests do not
    • Reviewed Jetty and Tomcat default TLS cipher suites and protocols
    • TODO Windows and conditional:resources
  • Prob will ask Ian to take a second-look at Jenkins' Windows Slave config and OpenJDK JAVA_HOME
  • Jenkins : should we attempt building the IdP including the Maven site with each version of Java ?

...