Does anyone know how to generate the idp-signing.key/crt with openssl?  It 
seems CAS is hardcoded to expect a PEMKeyPair 
<https://github.com/apereo/cas/blob/5.3.x/core/cas-server-core-util-api/src/main/java/org/apereo/cas/util/crypto/PrivateKeyFactoryBean.java#L57>
 object 
coming out of PEMParser, but I can't figure out how to use OpenSSL to 
generate an appropriate key file.

Yes, CAS generates it fine, using bouncycastle, but I have to generate 
these keys/certificates outside of CAS so I can distribute the trust to the 
various SAML 2.0 applications.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/36a4ed0f-a015-4438-a9a1-501f9fd5eaec%40apereo.org.

Reply via email to