Shibboleth Developer's Meeting, 2023-07-21

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2023-08-04. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

1. Nexus cleanup

2. Static code analysis

Attendees:

Brent

• OSJ-362: Add support for dynamic config to DecrypterClosed

• Spent time re-swapping in more minor open security issues for 5.0.

Daniel

Henri

Ian

• JSSH-34: Process nested beans in RelocatedBeanFactoryPostProcessorClosed

• JPAR-221: Migrate to Spring Framework 6.1Closed

John

• Attempting to add support for direct RHEL builds in cpp-linbuild via UBI.

  • Currently bogged down trying to figure out how Red Hat wants me to do really exotic things… like creating an RPM repository.

Marvin

Phil

• JDUO-71: Upgrade for IdP V5 compatibilityClosed

  • And JDUO-70: Copy Duo AuthAPI classes into pluginClosed which I did not test properly first time, Scott completed it, and now it looks to test fine.

  • Updated various Jenkins jobs with Rod.

• JOIDCRP-41: Upgrade for IdP V5 compatibilityClosed

  • Compiles and tests for V5 (maybe, see below)

    • JOIDCRP-42: Unit tests fails on windowsClosed

      • Big thanks to Rod for all the investigations on this. Not yet sure why Java 17 on Windows is different than Java 11 on Windows such that it causes issues with the Mock HTTP Server the tests are running.

  • Not tested in the testbed yet or run through the cert suite.

Rod

• Installer hell

  • Metadata generation now uses OpenSAML. Are we all done?

  • Splitting jetty from the IdP is not being fun but we will end up with a cleaner result.

Scott

• IDP-2068: Remove legacy Duo flowClosed

• JMETAGEN-5: Consider generalizing into a replacement for SP's metagen scriptClosed

• JTOTP-6: Port to IdP V5Closed

• Starting real testing of snapshots

Tom

• Tomcat 10.1

  • seems fine

  • old-style TLS/SSL server.xml config was deprecated in 9 and removed in 10

  • weird : testbed directory server starts on macOS but not Rocky, maybe legacy cert

  • weird : unmarshalling OpenSAML works from the CLI but not Eclipse

• Need to update all the Javas

Other