mahara-contributors team mailing list archive
-
mahara-contributors team
-
Mailing list archive
-
Message #50737
[Bug 1800058] Re: Allow saml auth to rotate SP certificate
The patch https://reviews.mahara.org/#/c/9254/7 allows one to have 2
certs in play at once and then to remove the older certificate via the
Admin -> Extensions interface.
What it is lacking is to be able to create a self-signed cert that
contains things like subjectAltName - due limitations in the PHP inbuilt
openssl_* functions
What would also be good to have is the ability to paste in a cert.conf
file details to use that to make the self signed cert (or at very least
to copy local/commandline generated cert / pem files into place)
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1800058
Title:
Allow saml auth to rotate SP certificate
Status in Mahara:
In Progress
Bug description:
Need a system where we can create a new certificate without dropping
the old certificate until all IdP's are up to date with new metadata
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1800058/+subscriptions
References