Blake
Supporting Shibboleth is all well and good, but you need to communicate with other parties to make it worthwhile. Participating organisations are commonly arranged into federations; we need to join one.

Each federation has its own rules about who they'll trust, and one of the qualifications for joining our local collective is that we have a server certificate issued by one of their approved certificate authorities. Our existing SSL certificate isn't on the list, so it (and we) are not coming in...

Tomorrow to set about acquiring a revised certificate which ticks all relevant boxes.

One test machine is now running with a freshly-built Shibboleth installation, though it's not configured to secure anything yet. Let's see how it holds up overnight.

T

Labels: shibboleth

- posted by Tim Bruce @ 1:12 AM