Revision: 1850
Author: andreassolberg
Date: Tue Oct 13 01:04:55 2009
Log: Formatting and info on certificates in SP quickstart
http://code.google.com/p/simplesamlphp/source/detail?r=1850
Modified:
/trunk/docs/simplesamlphp-idp.txt
/trunk/docs/simplesamlphp-sp.txt
=======================================
--- /trunk/docs/simplesamlphp-idp.txt Sun Oct 11 23:36:41 2009
+++ /trunk/docs/simplesamlphp-idp.txt Tue Oct 13 01:04:55 2009
@@ -156,11 +156,10 @@
Creating a SSL self signed certificate
--------------------------------------
-For test purposes, you can skip this section, and use the certificate
-included in the simpleSAMLphp distribution.
-
-Here is an example of an `openssl`-command which can be used to generate
-a new private key key and the corresponding self-signed certificate.
+For test purposes, you can skip this section, and use the certificate
included in the simpleSAMLphp distribution.
+
+Here is an example of an `openssl`-command which can be used to generate a
new private key key and the corresponding self-signed certificate.
+
This key and certificate can be used to sign SAML messages:
openssl req -new -x509 -days 3652 -nodes -out example.org.crt -keyout
example.org.pem
@@ -170,8 +169,7 @@
### Note ###
-simpleSAMLphp will only work with RSA certificates. DSA certificates
-are not supported.
+simpleSAMLphp will only work with RSA certificates. DSA certificates are
not supported.
### Warning ###
=======================================
--- /trunk/docs/simplesamlphp-sp.txt Tue Oct 13 00:25:58 2009
+++ /trunk/docs/simplesamlphp-sp.txt Tue Oct 13 01:04:55 2009
@@ -43,6 +43,24 @@
'entityID' => 'https://sp2.example.org/,
),
+### Enablig a certificate for your Service Provider
+
+Some Identity Providers / Federations may require that your Service
Providers holds a certificate. If you enable a certificate for your Service
Provider, it may be able to sign requests and response sent to the Identity
Provider, as well as receiving encrypted responses.
+
+Create a self-signed certificate in the `cert/` directory.
+
+ cd cert
+ openssl req -new -x509 -days 3652 -nodes -out saml.crt -keyout saml.pem
+
+
+Then edit your `authsources.php` entry, and add references to your
certificate:
+
+ 'default-sp' => array(
+ 'saml:SP',
+ 'privatekey' => 'saml.pem',
+ 'certificate' => 'saml.crt',
+ ),
+
Adding IdPs to the SP
---------------------
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"simpleSAMLphp commits" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/simplesamlphp-commits?hl=en
-~----------~----~----~----~------~----~------~--~---
