Shibboleth Developer's Meeting, 2020-06-19
Call Administrivia
09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI
Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2020-07-04. Any reason to deviate from this?
60 to 90 minute call window.
This week's call will use the Zoom system at GU, see ZoomGU for access info.
AGENDA
CVE-2017-17485 - don't think V3 is strictly vulnerable but we need to verify - should review for any other Jackson vulns since
- IBM DID demo/presentation at their request at 11am EDT
Attendees:
Brent
- Coded up most of the bits, just need to decide on the default strategy, and whether we need strategy plugability vs just on/off.Jira Legacy server Shibboleth JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 180d847f-bce4-36b2-9964-771bff586829 key OSJ-304
Daniel
- Nothing for today
Henri
Ian
- Java 15 is now in "rampdown phase one", i.e., mostly feature frozen.
- Nashorn removal: Rod has most of this covered already, but a couple of test dependencies required:
Jira Legacy server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key JSE-37 Jira Legacy server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key OSJ-320 Jira Legacy server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key JOIDC-10
- Sun EC provider partially disabled:
Jira Legacy server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key OSJ-319
- Haven't tried integration tests yet.
- Honestly, not as much as I expected (for which all credit to Rod for the work he's done already).
- Nashorn removal: Rod has most of this covered already, but a couple of test dependencies required:
...