Shibboleth Developer's Meeting, 2023-08-04

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2023-08-18. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

1. Beta schedule

   1. Shoot for later next week, via a set of nightlies rather than any formal release, but we could tag that morning.

2. Signing snapshots

Attendees:

Brent

• https://shibboleth.atlassian.net/browse/OSJ-372

  • turns out these don’t work on Oracle Java, contrary to the docs

Daniel

• https://shibboleth.atlassian.net/jira/software/c/projects/IDP/issues/IDP-2149

Henri

• https://shibboleth.atlassian.net/browse/JOIDC-163

  • OIDC conformance tests were successful with the 20230804-snapshots

• Next up: Logout and support for unregistered clients for V4

Ian

• Jenkins. Shoot me now.

John

• Continuing to seek RPMs required at build-time inside UBI containers for cpp-linbuild

Marvin

Phil

Vacation

Rod

Kafka-esque Windows nightmare

• https://shibboleth.atlassian.net/browse/IDP-2150 Still debugging

• https://shibboleth.atlassian.net/browse/IDP-2136 Mostly done. (Much) more testing & rework needed

• Very much behind on Documentation

• Also need to do some retest and final tidying for plugins (e.g. https://shibboleth.atlassian.net/browse/JJDBC-19

Scott

• https://shibboleth.atlassian.net/browse/GEN-269 – Thank god for Visual Studio Code. Microsoft should stick to implementing Replace in Files software.

• IdP testing

• IdP backlog

  • https://shibboleth.atlassian.net/browse/IDP-1972

    • Implemented a static/shared property file hook in our bean parser base class, most of the custom parsers inherit from it

    • Property file in idp-schemas holds properties specific to various parsers

  • https://shibboleth.atlassian.net/browse/IDP-1473

    • Patch was done a while ago by Marvin, I think we should apply it

  • https://shibboleth.atlassian.net/browse/IDP-2047

    • Finally went ahead and exposed a storage op to enumerate the keys in a context, used an extension interface

• https://shibboleth.atlassian.net/browse/JOIDC-164

  • Needs testing

Tom

• Signing Maven snapshots :

  • generate a new GPG key pair (Scott)

    • name ? TBD@shibboleth.net should be mail routable

    • expiration ? 1 year

    • comment : TBD

  • configure /home/jenkins/.m2/settings.xml

  • add /home/jenkins/.gnupg to AMI

  • add encrypted secret key to Jenkins Credential Manager

  • add passphrase to Jenkins Credential Manager

  • add credential injection to Jenkins nightly jobs

  • add -Psign to Jenkins nightly jobs

    • every job that deploys an artifact or just IdP v5 and plugins for now ?

  • add mvn clean to Jenkins nightly jobs to clean the build instance - if that works

  • documentation (Scott)

Other