Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Prepare your Servlet container. Linux deployers may want to take a look at IdPLinuxNonRoot, which documents one way of using privileged ports. Some containers, such as Jetty, include alternatives. The links below are to (imperfect) examples provided by the project or by deployers. The list below is not reflective of the specific containers and versions we support, which is explicitly and only available on the SystemRequirements page.
  2. Download the latest Identity Provider software package (the zip file has Windows line endings, the tarball Unix line endings).
  3. Unpack the archive you downloaded to a convenient location. It will not be needed after installation.
  4. Change into the newly created distribution directory, shibboleth-identityprovider-VERSION
  5. Run either ./bin/install.sh (on non-Windows systems) or .\bin\install.bat (on Windows systems).
    • The installation directory you provide will be referred to as idp.home throughout this documentation.
  6. Deploy the IdP WAR file, located in idp.home/war/idp.war. See the Servlet container preparation notes for examples on how to do this.

Controlling

...

Generated Key Size 3.4

In Version 3In  V3.4 the default key size has been increased.   Under certain circumstances this may This could fail because of restrictions imposed by version of java or Java and the java JCE "jusrisdiction policy" in use governing cryptographic strength.

In nearly all situations this should This can be fixed by installing the unlimited strength Unlimited Strength Jurisdiction Policy or by updating to a more recent version of javasupported version of Java, all of which have begun defaulting to the unlimited policy.

If this is impossible (or if you want a different key size) you cna can specify the idp.keysize parameter on the command line:

Code Block
languagebash
titleSetting generated key size
ant -Didp.keysize=2048

...