Shibboleth Developer's Meeting, 2023-05-05

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2023-05-19. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

1. OP/RP plugin release

2. V5 docs, link edit issue

3. https://shibboleth.atlassian.net/browse/SSPCPP-969

4. https://shibboleth.atlassian.net/browse/IDP-2002

   1. Test implications

Attendees:

Brent

• https://shibboleth.atlassian.net/browse/IDP-2069

  • per Scott’s request, reviewing what else needs to be done in ConfigurationService and related, and metadata resolvers

• https://shibboleth.atlassian.net/browse/OSJ-362

  • Have a tentative plan, need to prove it out. Details in the issue.

Daniel

Henri

• https://shibboleth.atlassian.net/browse/JOIDC-152

  • First time for me to deprecate a property and a profile configuration option

  • Trickiest part was to find a way to log about the use of MDDriven property

• https://shibboleth.atlassian.net/browse/JOIDC-154

  • Misleading WARN-line in the logs due to wrong XML-wiring - Still in-line with what we’ve documented

• For the release

  • Documentation for the security configuration - commons or OP?

  • Release notes should cover clear steps how to update the old custom security configuration into a new format

Ian

• Debian 12 (Bookworm) GA is 2023-06-10.

John

• https://shibboleth.atlassian.net/browse/SSPCPP-969

  • Tested package renaming via Obsoletes on all six supported platforms

  • Various minor SPEC improvements

  • Identified latent conflict with xerces-c on Amazon Linux 2 (mainly)

  • Need input on conflict avoidance approach and relative naming for libraries vs binaries (xerces-c, xml-security, and opensaml)

• Bump Amazon Linux images

Marvin

Phil

• Getting the RP ready for release.

  • Deployed to test IdP

  • Deployed alongside OP

  • Certification suite testing: https://shibboleth.atlassian.net/browse/JOIDCRP-27

Rod

• code tidy

  • Warning removal

  • Making use of newer helper method (e.g. https://shibboleth.atlassian.net/browse/JSSH-27

  • https://shibboleth.atlassian.net/browse/JSSH-30

• Back burner task thinking about V5 installer

  • Need to gather requirements

  • Where are we on Modules?

Scott

• https://shibboleth.atlassian.net/browse/IDP-2083

  • Gradually reviewing packages and then annotating. Goal is eventual elimination of use of annotation outside of packages and removal in most cases of additional null checking from collections.

  • Adding missing annotations and thus making additional cleanups during reviews.

• V5 documentation

  • Did some work on SystemRequirements page, needs more work

• Some IdP backlog

Tom

Other