Changes between Version 4 and Version 5 of IdpKeyRollOver

Timestamp:

07/08/11 14:08:02 (13 years ago)

Author:

jpmitchell@…

Comment:

--

IdpKeyRollOver

@@ -212 +212 @@
 -bash-3.2$ cp idp.new.jks /opt/shibboleth-idp/credentials/
 }}}
+
+11. Edit the tomcat server.xml config file to change to the new Java Key Store for the back channel query.
+{{{
+-bash-3.2$ svn co svn+ssh://sxjpm@iron.alaska.edu/usr/local/iam/shib-svn/tomcat/trunk/conf
+-bash-3.2$ vi conf/server.xml
+...
+            <!-- added per shibb installation -->
+            <Connector port="8443"
+                   protocol="org.apache.coyote.http11.Http11Protocol"
+                   SSLImplementation="edu.internet2.middleware.security.tomcat6.DelegateToApplicationJSSEImplementation"
+                   scheme="https"
+                   SSLEnabled="true"
+                   clientAuth="true"
+                   keystoreFile="/opt/shibboleth-idp/credentials/idp.new.jks"
+                   keystorePass="shibbpass" />
+...
+:wq!
+-bash-3.2$ svn ci conf/server.xml -m "Changed back channel query to use new key/cert."
+}}}
+
+12. Test config changes according to [[https://iam.alaska.edu/shib/wiki/TestIdPConfig|Test IdP Config Change]] procedure.