Shibboleth Developer's Meeting, 2017-06-02
Call Administrivia
10:00 Central US / 11:00 Eastern US / 16:00 UK
Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2017-06-02. Any reason to deviate from this?
60 to 90 minute call window.
This week's call will use the Zoom system at GU, see ZoomGU for access info.
AGENDA
- Bouncy Castle CVEs
Attendees:
Brent
- - JPAR-94Getting issue details... STATUS
- Researching/evaluating Nimbus OIDC/OAuth2 library, which I messed before. Previously I only reviewed the Nimbus JOSE library.
- Will soon backfill changes for metrics/status page for recent metadata resolver enhancements
Daniel
Ian
Marvin
Rod
Scott
-
-
IDP-1170Getting issue details...
STATUS
- XML schema TBD
- HttpClient docs, stil making some tweaks to fill in gaps, e.g. we don't have a way to do pre-emptive basic-auth
- Will work on helper code to handle deprecation warnings and then get focus back on SP
Tom
- jetty-base : download vs unpack > both
- just a handful of files
- download :
mkdir modules
wget some-versioned-path -O modules/idp.module
java -jar path-to-jetty-start.jar --create-startd --add-to-start=idp
- more suitable for deployers
- unpack :
wget some-versioned-path/idp-jetty-base.zip|.tgz
unpack ...
- more suitable for integration tests and Windows installer
- code changes to change from unpack to download, so do both
- both
- add [files] to idp.module as well as dependent modules like idp-logging, idp-backchannel, etc
- locations of [files] ?
- could remain in idp-jetty-base/src/main/resources
- could be GitWeb or downloads/ (possibly deployed via Jenkins)
- GitWeb docs for downloadable URLs ?
Other