Shibboleth Developer's Meeting, 2020-08-21

Brent

• Jira Legacy
  server Shibboleth JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 180d847f-bce4-36b2-9964-771bff586829 key IDP-1657

  
  
  • Fun with TLS!  We see different behavior when connecting to newer vs older target Linux systems with different versions of openssl.  Trying to confirm.

Daniel

Henri

• Polishing 

  Jira Legacy
  server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key JOIDC-5

  • Testing client secret value resolution on test deployment
  • Polishing the configuration XMLs (also help documentation)

...

• Mostly complete: 

  Jira Legacy
  server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key GEN-264

  • gitolite-config and personal repositories still unconverted. Probably declaring victory, assuming people don't think it's worth fixing gitolite-config (would require changes to Gitolite itself).
  • Meanwhile, I observe that the main branch in java-idp-jetty-base and java-idp-tomcat-base is surplus to requirements.
    •  
    • Proposal: remove the main branch in these two repositories and set HEAD to the most recent numbered branch (e.g., 9.4 for java-idp-jetty-base).
      ok with me --Tom
• Progress on 

  Jira Legacy
  server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key JPAR-132

   (for 

  Jira Legacy
  server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key MDA-65

  )
  • Have this working on one module (the important one) in java-metadata-aggregator. You can see it as part of the site for the product here:
    • https://build.shibboleth.net/nexus/content/sites/site/java-metadata-aggregator/0.10.0-SNAPSHOT/aggregator-pipeline/jacoco/index.html
  • Changes seem minimal:
    • Needs a build plugin instance and a reporting plugin instance.
    • Need to add test to the command line used to build the site, or it doesn't include it (probably fixable, if we care).
  • We could probably add these to the parent POM if we wanted this everywhere. I don't know if it would work everywhere, of course.
  • There's a Jenkins plugin to allow you to graph a summary from job results, perhaps the nightlies? Not using that yet.
  • Example output from mvn clean verify (with <haltOnFailure>false</haltOnFailure>):
    [WARNING] Rule violated for bundle aggregator-pipeline: classes missed count is 4, but expected maximum is 0
    [WARNING] Rule violated for package net.shibboleth.metadata.pipeline: instructions covered ratio is 0.69, but expected minimum is 0.80
    [WARNING] Rule violated for package net.shibboleth.metadata.pipeline: classes missed count is 3, but expected maximum is 0
    [WARNING] Rule violated for package net.shibboleth.metadata.dom: instructions covered ratio is 0.78, but expected minimum is 0.80
    [WARNING] Rule violated for package net.shibboleth.metadata: classes missed count is 1, but expected maximum is 0
    [WARNING] Rule violated for package net.shibboleth.metadata.dom.impl: instructions covered ratio is 0.67, but expected minimum is 0.80
    [WARNING] Rule violated for package net.shibboleth.metadata.pipeline.impl: instructions covered ratio is 0.75, but expected minimum is 0.80

...

• Plugin management.  Installation now works (as does listing).
• Update is all that left
• Plus bugs
• Plus tweaks:
  • UI work sucks.  The plugin interface will need extensive feedback.  Right now my approach is "The Perfect Is The Enemy Of The Good" 
• Thinking about optional config files - I'd like to discuss briefly.

...