...
- First, download the directory structure and the necessary files for this distribution. Download the file: File:EduGAIN-Metadata-Processing.zip
Unarchive the distribution:
unzip eduGAIN-Metadata-Processing.zip- Change the working directory:
cd eduGAIN-Metadata-Processing - Download latest version of the Shibboleth Metadata Aggregator Command Line Interface:
wget http://shibboleth.net/downloads/metadata-aggregator/latest/aggregator-cli-0.9.2-bin.zipwget http://shibboleth.net/downloads/metadata-aggregator/latest/aggregator-cli-0.9.2-bin.zip.asc - Verify fingerprint of the downloaded ZIP file:
gpg aggregator-cli-0.9.2-bin.zip.asc
The resulting output should be that the signature was created by “Ian A. Young <ian@iay.org.uk>” with key D7079C77. - Unarchive the downloaded file
unzip aggregator-cli-0.9.2-bin.zip - Create a symlink
ln -s aggregator-cli-0.9.2 aggregator-cliIn order to verify eduGAIN metadata, it is necessary to provide the eduGAIN signing certificate to the Metadata Aggregator. - Check the signature of the eduGAIN signer certificate:
openssl x509 -fingerprint -in pki/eduGAIN-signer-ca.pemThe SHA1 Fingerprint should be 8B:81:7A:0C:F3:F8:35:2F:85:91:9F:11:37:14:3F:98:91:8C:F8:34 - Adapt the main configuration in conf/mda.properties
This file allows a very simple configuration of the eduGAIN Metadata Processing tool by setting a few properties. These properties then are used in the conf/mda.xml file that is a standard Spring context. More advanced configuration can be done directly in the file mda.xml. In the mda.properties file the parameters BasePath, EntitiesDescriptor, RegistrationAuthorityFilter, SigningKey and SigningCert should be set at minimum.
...