diff --git a/eidas-proxy-1.test.sveidas.se/overlay/etc/hiera/data/local.eyaml b/eidas-proxy-1.test.sveidas.se/overlay/etc/hiera/data/local.eyaml new file mode 100644 index 00000000..d02c17e6 --- /dev/null +++ b/eidas-proxy-1.test.sveidas.se/overlay/etc/hiera/data/local.eyaml @@ -0,0 +1,6 @@ + + +proxy_service_cookie_encrypt_pw: ENC[PKCS7,MIIDAQYJKoZIhvcNAQcDoIIC8jCCAu4CAQAxggKJMIIChQIBADBtMFUxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRVlBTUwxJjAkBgNVBAMMHWVpZGFzLXByb3h5LTEudGVzdC5zdmVpZGFzLnNlAhRF23wJcO4AI3jkvpKTLff1lsHG5TANBgkqhkiG9w0BAQEFAASCAgAgP8xbt7ZW7OquPFJNCl+C1Lu4YxBt2Et/lVo49euOGFFhLx74HDzvKubaSr1DQrChvwNybTZmj41Vmb28zDgVWew4ENU8AjVFo/6UKqWNN6ctiQgvwctkhAAZO1Q64FMVNiKQp0nUdCEx1QRDMCd6C5iBDuUNj3VLDEmemUsFwiXvBEj/Nulkj0JQvefl1O3HD7cUrhnBORfmRXWMmYVKs92WzCGkOxkYSDRFBcE1gaMj+sFK4yTzvTDNCTV68XS6dpDIoh9lzobyVLZJ2nOgu7hrqWyOUs8cRcWDjAeN9XQMKwN0Fhsg8RI21+SmUhPscbnlD4ussNKgihuRH0FLJ2YTMZOJuKwuohUtqy1kIRnJ07d/uhyh9ivsdYMkNJmFINCm3C+BLVDFNjYLaO0JPaH3E0uA9fcbcwk8p8+IvEJfTPb21zFqB7jrjXOAkJ5q25NNgRZZrknU9tneaGZtjBYux217o0iacfNGuk8OOK687N2LqoZAAK2zaEA9MwYXBDcHCm+7diqnlMCCstome2/o1ARlseb74w+UtE/8jOFRmv/InLQOwbLHjEgK/9yjgXL6n58DZZKe/uQlhiBRxjRD886eCHmUz5T2lpSAoG6s+QuwobvcLUNKiNe9jNtzK7/BEKMf2Y+8SodGw/4PTd/lU/YEDjLmtq0ycAK9kzBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAkUlga3HnbUw8bAcCcgc90gDCF3aEOS4VZZHREO2/IE4TI2fefI9l6P4tcR4dSnasKCUWr60FmOB86F/rKAAMSFeE=] +eidas_metadata_key: ENC[PKCS7,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] +eidas_proxy_key: ENC[PKCS7,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] +pkcs11_pin: DEC::PKCS7[xxxx] diff --git a/eidas-proxy-2.test.sveidas.se/overlay/etc/hiera/data/local.eyaml b/eidas-proxy-2.test.sveidas.se/overlay/etc/hiera/data/local.eyaml new file mode 100644 index 00000000..81f2cbf4 --- /dev/null +++ b/eidas-proxy-2.test.sveidas.se/overlay/etc/hiera/data/local.eyaml @@ -0,0 +1,6 @@ + + +proxy_service_cookie_encrypt_pw: ENC[PKCS7,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] +eidas_metadata_key: ENC[PKCS7,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] +eidas_proxy_key: ENC[PKCS7,MIIZRQYJKoZIhvcNAQcDoIIZNjCCGTICAQAxggKJMIIChQIBADBtMFUxCzAJBgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRVlBTUwxJjAkBgNVBAMMHWVpZGFzLXByb3h5LTIudGVzdC5zdmVpZGFzLnNlAhQG54icPwVib5iLG601KvIw+3mkQDANBgkqhkiG9w0BAQEFAASCAgAFx1j7mAaeyEMX/FkPA9CvV7XMRkiYLEezIZ/w/1HKuslyDMwN/bDERgaFvGIISOXi4zVxwMmNeN6Ii5t4eA4j2oFM63vmNnzcY6VQr/Abw7hpMLzwPPyikZssO3laOo4WZsJmghVFYMZ376YGiQhecWs99ydF02DOxJ7DZBtZ6sQ2yvJDtc1PY8WmlfE7kCY3hlqM+rDXTLArejsUUeh7meELg94wSpKNW/m8egrT+7sjvgrCNlAztVxG0PYPouwTy9ANW4aMtP9il3SMq5so/ZHvf0c7ot7hS0E0ou2jhR+XEN3Rdg3Ebkxpar60Pry/TEcQBP1tAVhXgwzZDoEWENed/9MJhl68KnoK+W/kudACs8L6de1iMm4Y2msr1CIgXdXHwfUDwmU7k4TAUsJhuCBJEvF4tZ4E+OSrj0FnkqV5hQQDJ1QHBx38UQ+ktC8dBGKzN4IIxDw0m+4f46OII7T+cnKblLMzGztHyihql/cc5OPS4wAtPUNnpkxvpsws52YCaHFPMh5M++FNUZH+b/uT7NSBNeOQzNN62/+sV3uPM1UhEelLAzXaEGIXX2ZMMO9M5rsOBAYvjPlVZX7rfTkvzqBLNsDwpBczDRYVVKNyb4l+RIGTqSH2Cco0URZHRlGckPsivf2R6F1GYSY7GT5YQOH6Af9JRezaJyoCaDCCFp4GCSqGSIb3DQEHATAdBglghkgBZQMEASoEEH460CAqZooYmI8wvsJi0yKAghZwkTb1VmsD2RrZJhKxD0yE5vL09aUxLtkzC4Qb407SMdq65Z+Ww7vl4agAQS0MK79pU2GL84qYI4Y42yLPDS0GTAG79Wn+fj5BeZNjU/VCuZOWw12gGkX3KThT5o5fnVPFPoxdyuHbkCstVLcEUB1GfWM/lmIulv3il9cM6JWe7WQMU5EFxeD3cugAd7qvE3xxoQUrYhHRRKhT0nb60iAEuUX1pMasN1WOTjQ+CFShJKJa+9QG2i/YSOoMOdqWH4m2Enn7LqfkrHJvqEr6ol26b6KyYiZF0f1E+aIpwSP98vee3pHFJkIvNxy777/zpu6yJcA5j5nExo5vemvLV5CLZSBfeZhPZNjldD6Jmh9b8SElAWxU+xP0A1TRTZbU0myp2WhB0PKmhj6lbiwUVS1qkNMSjm9beAZBRawQsYG/k9Lg1CxJnJdDCGSCrUmkCaC5yjWy/1fs97PQCuvwNCcJRag7ZLtmOsa0MUuA4wzTrnazNcIwBHq+PSXzEseV+9qx/xtQDBv2ight6HqN0KLf3Z9a0MLiF79dsfwRJCEpHlT5kC4LhJfCq7X+ZJ9RR9BW+0YWpHcxI8+Y5VXtf8AmGTw/hdbc+0TlgvqkYLWfKmHkExYXOO0oFLIsLKAaeGnLzIvef6CaHJUF5FUQv27F3wV3pg7kwsFqHaSbCktH++DVMCJnBjkG2g0bGrWNxoN/A3rP014YG9gU8NDffaAMy0wftUdrrd/KfCE3Gn6PVDzzxopMYzLtV+4gTbpP+8Id4DV3hhW40wLHFehTnJXrlZWgFiXEuE/GXbqhU8NSu8RvWY/SEMWClOJGnq25uoTuylmeoNeE63ZPngvV+7yT5GBgozDncks42WPhkLQbLlaJj+HBJj0oCnDw42SzykkNyY3nZxhqvh3BxWTpOWKj8/wTEm6E42kGrGueoeey+T7J3+CN6rvoq1v7jyUEWd7TYTbG+1nsFP4JjGZx0o+KMGgNggHejHwyoSOWlaXMUkdQMucr1GfW8J+2JIFGCaGYjzC5lqwh/y56jMn+hBrlEjLEQRWCzsDIIYciU7QsjKw9JYsud0zOve4uyUlhziAlJ6arRKGRjI+oDVMVUoOGktXHTjWvmpddOfXORDle0nm9Z4R9xq4RpkuvTgbm3O6k9kqstTbJatPPj4xx5lTzESSJv2WTo+p1CkgdTC6MM17lIwVZZ+Khz7oG8Oui3mMtWuD09tA6W333+t+cLP7iSfNW1/JRnRgddflD6QJ8LqrOucje7kA6/f0ssnEk9Dwi/EMjCSraMS5aljfkDetZb0m4xBM5+CwGuG53pHpIobuDCF/G8pCVUOzpyAGW7BroPOmbQlZ/T4yKt1NauC3AytXK84HW4Gu00pZNQZj4b9CutxfmvuGMXst4EqPIFQfdY9a7KRSmeskLaBAI+8VTJZM7QX2U8enW4WuqH15jbmncTEltmgMuKp4GC8RbGLp3wFKYBNWVim/JRUpNwlOxx79rrHsthK39oh9Dfo/5Xna55HEvlw18rZk4ksOFKgsXkltxMnfV+FDU4wMVJgrMC7piXYb8wul7jW1xjUovkV8/4nXLyBzop+ZmvsuHnCmkhgFdKuj+u8/3U7DpZolbJkc2irbpxw6LCCMJhuEYr752r4g3qLzMNBr2ZYttKe8JLZQrG6/jDKw37JsrUnedoOeRhQLTf8VhObu7H7SCJA0SCWuc/LVaIP6NqioXB0H7xvY6IXQPTMqV6rfQ+wlICXCEIxJZZu0FpVRqFnR7BDwYcwyjUQgeyN6GRjWIb9L/zjnxjoIjiAEAawmK14dyrDOPNl1+J84kwN7rxnRLMa1KyXBx7n+5OZu4MPv7DvRn13SI9M8kzK0Zy2/g/kBV/2b76ySMNC/lkrxK5Uzu9V9MS6rLvMO64Rn66n0QOOOggre2eJvcSeWXh9r9LRi653hBe88jtaoApTGPg7EtMjXvM48SFN73gYL82Rtwt2bwaD3E+xYBPlfuwEC2JN3s1AOvkTeN6FwxPPaal5Gide/lntv5j07OTKBbuslsgUpF1WRa8CORUtybttn5Z4wgjLvsJNlMY3oWN2dpieQrd5nhTFf5gW7o04BgxrrWnpi0VAu2JBiU5v21R53LY4HWvyk8JjLY87VWn7OuFVPYFLLkGjLJ+RkYFyEXPYXesf4n2YiBdjBDFNOav3UUzeFZWJLq8jMzkJSZwY91e2bsP4IUfyCO6vHu/r/3FOQv8EiTr6IRDhD6RfBIqdBRLISNEUbMRWd6CIKym3jGprW6PU1EXvpLFNv94489OELPtQL0543f+6bL7Y96fUWvx+jkz2pgPZ+hTNKGeT9spOxMKzsMBTyAS12nwB9nS46WelKqhEow2ItmL1cN9oms06v+8eQ4gRXWpuVTBClYBMbqrBLbtQJQWfGWI/8ejwvc9Mf9YrcjdpW5tSpuagTCr7FMCHLPjTe9/mBeFsSvrImVgWfb/dsgEE7/YLPwQudDC7AVMpZWbGjRbb4ZmB/zBzCna/LskhfAZjFKQth0EcOfs/FWZm0BozeUqhK0hDC6ERecjE2PjWg16dm+rm/GiQC/+MCtVp7sOkRYmY2P8pAmNcNPDYeNmpJy0Atlf6dohJicdT9CugJYcNmRv0u3uaFRvbpGpgxv6WtaX2x50yoiMV2TcauVOgtPXEI2mZ9Ahq8LP+ThlLV15Ij039BHmSv+5jjma9Zs3vSEb/XoUCNQOsm9J97Kt0oQQNHONWi7yiAycOt9fhZBq1obhEiSdOB9Tws6DzjSUbrRmTPRnoOy8CeXiEG+RjkU7gXMYQsRcj0hk4JC/yu2QPYTi9pg+udWWTyNKAIDNSfuyfLdsHR/tHidoYKZChtIX5l5KIBDPRTZgguVr3bDROyafE2nVLTGLKCI6JwHRpfjK8+vP7Fw9vdddwX8Lv2wBk26zGx+A1iPWaeGeO6imNQp4HCxubciH6Zo0KcdZcLk1sqApMjMtuPkzN4dCRtyrPKBM94p0W8ZRTKH1WlucM1arfdyn6LOhLQfqa8D6tdJaQJPz51gJanyvOsZYoAXIvj6Pb8yB9/Z2CpParZq5wUmSDViuYiJkL8r56vP75pcSc8uAPunqYm071fgD3beVdNm/YmiFgFd7Su444VARVwfQhXLl08DpjaPVEPsN1CjcjGtAJpDjdLfaWl0fOKvm+ZkKmNmEHTXw8KIsK0wYMcQz49JYjHDdpBEaZsHgdnCvpTvgvPAYOyMxYG2OoE4AdFKqCGa5frAXTrTRSOtpyYaSOq9tHm17Ir6AkmzBkPlYQyvv9th7Bhe6U8Eg8vAV2CYKYHMkvjqjad5e+S6CV5R39HFTks6mkQyY20rDiAM46aIrTJ2gsX9vrOAWsHG6I2EoR2fbyRmUh55FrM52Oa0B9+/Aw2fpTuspPKoCfVhFxySod0MRsQxYSvL2B+nDlorp0zpCbBYJxn3zIHaBiQFO9hBCtbNTTIpGFfVOVXgVSqWD5Rz2e+bDpTt8HP62G2JE2PnSo8hXd00D5gzT+uxt3IKxOw6DIpUop9AtA1fBfgsHUwS3vvzH3fP+99jJeDhIt1YXcM8vx7b8OnULvJVgjHI9Guj0AR2jUBpHKzAQWjF8rKGo/4PhsE/HTWnDiQoqpfikVIwus85PkZwC6DJC+XXtTaUsrsu4JYWxulqs9QkdJlfEYsbWbpeFqo5ipWFVo1P6seMDLgGknjuLqSGe9c8Fzg67AOGXHMC4PkSU7FYnapePg8MVotB/B0LwHLBgFTNilKZmrUxuf8/QQDiiqdorgPWZOglRCDLG5UNbLq/QEyoRqssgWNAVLKqwgzjC6L7F5tBHKszHteTIGKp6+ttBhUoytGCepkUZvhqBZz7w2OiUgJukHkhO0mjvuVVu0FAwScUq1gWDzRA94MdgYqICThtduN4Q0tIPrj6dHZcTt8oYGNFxkv0DSb4sXf7FCEf4LHZPGxgq/vjz3xLXK1GdOpww1VsVz0BJLF8I9UhBIPgTOGwyfcsv3zw75fDNxEcHGQjahfy4iLXXUszRxKHun4MWY0G82C4Zd/9lGvorGlONeUZoQWDgUWbp0teshlJ/G6tVhbXZr64VDlKdzoXXic1yAK1Y5qsgtzrsvN68z3dlRbZsaORNMhYlj8IQKNOhqXeQkcSlayaIxyeZ91BJWAbbbEYT1sCqHQM/0z/tt2CyLIpZ9hXYTeVCeynvoEqseY+3DwHH3MYbuLkQLn9PD+aZS1yt2RvOQYHGQVA/WPkso1xHiiM29qfE3Il71+beDorTFDv6ySpHvjWwEKgXW6acVve+cmcVDF91TAMj9d39mnHfYE3bN/JZnTBDVn2mYU1x1BJhfMuUQwK7xYvmJNeKWZWThQW9xYRDlfIQjxVf0oTqGS0dahUy54LpRY9BwTaj630kfyMmmqOm4JB14uO96xIExnW2VPTWc0VtohixBz6yBvUKfrvzdw4E9plyopet467Tkhd+z7S2rBBJozUQnpwmjlNfVPMxfLLnHCMmGBl9ZrO7LfkffGfWWIta2/thwek+eMpFZso2Az2WjPu4TcBqqoaj9ebZA6Rruz7xBdHT1j/jPqI8Z2WJEhEmmZboVu5rZKfylhyvdcxg/Wp4ao7+8dsgxYuX8lFb/yR8qZHtNhc+9SNCkxv4kcmJpTR7TDFJGZ4Hfrdq8Uspl94FVWB6HE94GPrbGaQbu71wArtRcKWuKWZOYq3mIpIHe4yb8ubM3Xf9BgJUv5V+MA2Rmrd5BL5L2wQZ0g01eKE1Li41MSL3b0CcdPIhrB6FUtIvV3AsQmChUCwvrRJGdjj1gFPXQUo6kKHjvSfmzJz4BOHVFKJs60klYfKp/c1gQEdxPKob9jiPDg7ZsSfGsDSlEH2gYomG1nBFGZJuVw1ngvDNe5HOfYoEOFMfRqi7YQfH45XgvEiNXSt/0+qVrNyW1TfvMq/EZQfwFxAGDQcfnU+u3Sg8fCuM8zwb/CC2hPEjSzv+ApjqLUCWVM4dOKTNQssM6tq2961RTb48UVTAil1mpjszfem51S4OS+WA2X9LjqtnIylBp4HZd/km4oSphXzmaksSyjTsUG17b2RVdy3orBkF7ZZygLZDhmPYQYMBGSdnxgnIbp7lsisahCa26YU415jMKF1kgcI9jr+TgX30yRFKircBnMtwW9QqNOFsDZY8keAWR+HseY1tIMR/3gZLM5gsv5Xc9EahVWmcQhmDIjBuaasQ44T7FeePav4KJApDPKO5RisDTfqJDsKDeQPdjehzv/05e1xbYdSGHMP0gWHr7ZLOxzYAP7EHAVxpuTvp6McnpHK+uiwAKBfAKd8SYLhhx9Ae+hCZ4gdg80/wkTag2r2MYcvN3ls5QlNei8gBn6HBHyFtc+i7fcHtwLVfrlJCzwpiZKz2qKeVLjuLi7gfSOjBnf+fgetgNl/u7IGlq0lvMUx5dYXjEK1uxhLRDRFU9HBhcPYaWvMhm8Mbx3zrzFyG1cHIVmJ4QRyWFHY7yJYddqahWfqMFPYKmKVSVjZ7ZvlQx2HHvrzHbNgYzYVzkN01InA4PvC1oU823AK+ab9BipsW6VHLUDX6eu0DoK4DkdGtI1raPqjxEQND7yecpJfKtmMgv2kdfnk66IR8w0ANi1yCFG50TdvuRAJyxJQcePLne/1c/+QwIuu91pLtenfjca2n9JBOUTDMlKn63WbGCCwFsHTU1BaoZOCEzPUEKZaJstFX5trg0LxRY+/a1Sxgu4g84HtOv/YVWADVr8CY+Ksza8HMEFEpk9/nSoo6JZgju7Q5eDEQbfOmhdq2NAWDla7/HWSNzevORRD0byHeAleRFzpq0q0QKnO4Qmb2QQ8yX8mHLiCo6kDGh+S43K8ULN4TLyAw/Azb7xK7jEVrFNlfAhgLpsTTd/f6nPTUhH7D4mgdUJDmeubhy4hJzH3+tomkhSOQGdi6AfzBcw+UPeJvK96ilNYe2ETr0rydAyfMRxbG7psFZc+/X7qlM7PHFaA6NRlPlsOA8yhQbgTTpE7tX5sx1ji5ZWLUr6C4ecB/ROjJ/qdxsqH6SEIb86nA1eVmB99DsNVslUCkpWwGbO63x7A8chl2q1fACl0jiVDqyLac8/HSryc22P29g8+obUsFYpG/UWj9YfoF/kdujf/zF9or9oV7FsL3f/I3s6SJ+CIhmPsO21KjZlXPYWkzjfJAXw1vgHBV+BhvA6hg8OqP7kY/e3OE4j8Gz992nu5Hybciy9dgSKof8lZQ5eisO9c64QaxP/wqNMtbzMEdlpdeH0aICObYaGuyqsjJGoBPqgMxXkqzNMyJLA3pdbYAVUsiI789LEh14ukoJHU6HEVGajFd8Oumj/SYY3cvb2cefjA4STiAMFV/RGfCIV5w17T5GlzOxv/uAIB8QzuJcvUmvsTZmdPVtnxiuAij/hCM2uMg3CMZZCxc0Aie1Lb5lvezYhibe4noCvuWiJubJ82tZZL6m4xU16mzVo00EWkdUuhCO3pOcXzwhgTW9KPY29mHwLj+sf3wIWevpTnYPPs6dQ/0GSzn8CHphU6vcOb9faR5KZk4geqvxJmYAP67b3SwkFWeHcilK3uBInFTk/lereP4+nYwYGprVPxPdNdUCdNXDMRJd2jTyBa2/SMXZgTow+tVTpuyqcVcMC0daG44rWBXHK9QZhqQSMMKLjBzvhwlk2icK7ag+aw94Xr6dcHXL3aHs3WEi6sLFfOPTgnkSQQ5prSRgnlxNE/u+LfpDCJXlhzmN2tJpXJW58ZQA6XW67AzmDDfCvUkphUM71zyk5UQfCd7fnEYZd3mZQnbSYnACAmurIMTS1rJmn1rShy8af7lcDKQSV5Lum637G2vq2ihCI49voWGhMp8dlCwDyxqggeAN2nWXzu9EdMF56/MiQ/ruzce4hmsTNbaAqfvNve7cVpBEAG1RBMUitD6Rk4zSxN+z9oa6pZS+7VNO75aAqchOPH2ihA/FuiQZjH6UL5RrBy0imCpJH+M40kL6025qIPCmVTnC6RzcPZbLSOnhiU9YXbf+URQLITOIIpZn7iwUns7cjs6Q/bDhBydCpJLsxBlnmakpA/Am79gSPJv80snojtB9lTQzx9EhEkgVAN+jfCPt9rh3NzXlaMq28WdB9rRLmoWc9yclqnX3UBLIqE3K1V5BVaF5hAoW/j//x/U4JIuvAm3M71jN7fVUsainRds/WRPpQj2YS9miR2vIRtPUgd3Zt5aXkvnBCGHSZTfCqeyu3SGpXNPkGoagr4rYuO/PpH2dpbgDopRa/Zg818vx6srr7nLTo6W49OzKZZpMg6u0cODz1AHM2NI/6gAWN1RRg0gBs78OR47syrUFmE8IaafFFghW3TN8r2SibZCNG1qEQw3n0pXxvpqJPqGSHNHqrI8M0fF2aoJ6FAdflP5wjpKDN6gKaNr/0hlxYh/cJ23ppfxQUb7Qn9Q27HZ2CRPJ5E2N3+Ah85HOP6HkkDiXwGFyv/BkmZty0J0LdsxY7Dn4hm6BNEIKMBGkRMZ3RadxWZfo67JwS93VReRsTjuI9NDkg8TrCU1pXeq7/aqownkGpbl/CrjHjovsbXpN8xS/w3QRcZXohL6hNa0ifTCCe1CMiBwYBVJp5siYuPbpppb0L1SvzoWJZW1Q978XaBdQQ=] +pkcs11_pin: ENC[PKCS7,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] diff --git a/eidas-test-proxy/overlay/etc/Chrystoki.conf.d/50-ha-slot.conf b/eidas-test-proxy/overlay/etc/Chrystoki.conf.d/50-ha-slot.conf new file mode 100644 index 00000000..3439ecd8 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/Chrystoki.conf.d/50-ha-slot.conf @@ -0,0 +1,12 @@ +VirtualToken = { + VirtualToken00Label = sc_ha; + VirtualToken00SN = 1462371088; + VirtualToken00Members = 1429929129933,1428350538479,1429933786534; +} +HASynchronize = { + sc_ha = 1; +} + +HAConfiguration = { + haLogStatus = enabled; +} diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cache/.placeholder b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cache/.placeholder new file mode 100644 index 00000000..e69de29b diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/application-se.properties b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/application-se.properties new file mode 100644 index 00000000..c4dfbe5b --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/application-se.properties @@ -0,0 +1,105 @@ +# Logging +logging.level.org.springframework.web=INFO + +# Service path +server.servlet.context-path=/eidas-ps + +#proxy-service.path.prefix=${spring.config.additional.location}.. +#proxy-service.config.location=file://${spring.config.additional.location} + +proxy-service.image.logo=${spring.config.additional.location}/img/sweden-connect-color-yellow-on-blue.svg +proxy-service.image.icon=${spring.config.additional.location}/img/sweden-connect-color-yellow-on-blue-no-text.svg + +# Service port connector settings +server.port=8443 +#server.ssl.key-store=${proxy-service.path.prefix}/keystore/sslSnakeOil.p12 +#server.ssl.key-store-type=PKCS12 +#server.ssl.key-store-password=secret +#server.ssl.key-password=secret + +tomcat.ajp.port=8009 +tomcat.ajp.remoteauthentication=false +tomcat.ajp.enabled=true + +# For development. Allowing signature check on metadata to be skipped. Default false. +#proxy-service.dev.ignoreMetadataSignCheck=true + +# Initial delay in milliseconds (default 5000) and seconds between metadata configuration recache (default 240 sec). +#proxy-service.daemon.inital.delay.ms=5000 +proxy-service.daemon.recache.delay.sec=240 + +# Location of other properties files (general-metadata.properties, psidp-metadata.properties and natsp-metadata.properties) +# Example specifying external location: 'proxy-service.config.location=file:///opt/webapp/eidas-ps/cfg/' +# Example specifying src/main/resources config location: 'classpath:' + +proxy-service.country=SE + +# Key Store properties +# Location can be specified as "classpath:" or as file path e.g "/opt/webapp/eidas-ps/keystore/keyStore.jks" + +proxy-service.pkcs11.external-config-locations=${spring.config.additional.location}/pkcs11.cfg +proxy-service.pkcs11.reloadable-keys=false + +proxy-service.keySourceType=PKCS11 +proxy-service.keySourcePass=${proxy-service.pkcs11.pin} +proxy-service.keySourceAlias=sc_eidas_sign +proxy-service.keySourceCertLocation=${spring.config.additional.location}/sign.crt + +proxy-service.encryption.keySourceType=PKCS11 +proxy-service.encryption.keySourcePass=${proxy-service.pkcs11.pin} +proxy-service.encryption.keySourceAlias=sc_eidas_encrypt +proxy-service.encryption.keySourceCertLocation=${spring.config.additional.location}/enc.crt + +proxy-service.metadata.keySourceType=PKCS11 +proxy-service.metadata.keySourcePass=${proxy-service.pkcs11.pin} +proxy-service.metadata.keySourceAlias=swedenconnect +proxy-service.metadata.keySourceCertLocation=${spring.config.additional.location}/swedenconnect-signer.crt + +# Session Encryption properties +#proxy-service.cookieEncryptPw=changeme + +# Requirements to show consent dialogue (Default false); +proxy-service.consent=true +proxy-service.consent.attributes=urn:oid:1.2.752.201.3.7,\ + urn:oid:2.5.4.4,\ + urn:oid:2.5.4.42,\ + urn:oid:1.3.6.1.5.5.7.9.3,\ + urn:oid:1.3.6.1.5.5.7.9.1 +proxy-service.consent.valuetranslation=urn:oid:1.3.6.1.5.5.7.9.3 + +# Welcome page presentation text location +proxy-service.welcomepage.markdown=${proxy-service.path.prefix}/cfg/infotext.md + +#Metadata Service List location specified as either URL (http or https), "file://" or "classpath:" +proxy-service.eidasMdListLocation=https://md.eidas.swedenconnect.se/mdservicelist-aggregate.xml + +# Optional certificate file for validating metadata service list file signatures +# If no certificate is specified then proxy-service.dev.ignoreMetadataSignCheck=true must be set +proxy-service.eidasMdListCertFile=${proxy-service.path.prefix}/cfg/swedenconnect-signer.crt + +#Metadata location for aggregated metadata specified as either URL (http or https), "file://" or "classpath:" +proxy-service.eidasMetadataLocation=https://md.eidas.swedenconnect.se/entities + +# Optional certificate file for validating metadata signatures +# If no certificate is specified then proxy-service.dev.ignoreMetadataSignCheck=true must be set +proxy-service.eidasMetadataCertFile=${proxy-service.path.prefix}/cfg/swedenconnect-signer.crt + +# Optional cache dir for caching downloaded metadata. If not set, cache is stored in memory. +proxy-service.eidasMetadataCacheDirName=${proxy-service.path.prefix}/ps-mdcache + +#Metadata location for national IdP metadata specified as either URL (http or https), "file://" or "classpath:" + +proxy-service.nationalMetadata.prod.location=https://md.swedenconnect.se/role/idp.xml +proxy-service.nationalMetadata.prod.certFile=${proxy-service.path.prefix}/cfg/swedenconnect-signer.crt +proxy-service.nationalMetadata.prod.cacheFile=${proxy-service.path.prefix}/cache/prod-metadata.xml +proxy-service.nationalMetadata.prod.index=0 + +management.server.context-path=/manage +management.server.security.enabled=false +management.server.port=8444 +management.server.ssl.enabled=true + +proxy-service.syslog.enabled=true + +#Private SP requests from other eIDAS countries +proxy-service.private-sp.enabled=true diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/enc.crt b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/enc.crt new file mode 100644 index 00000000..d6e3657c --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/enc.crt @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFLjCCAxagAwIBAgIEBEA5gTANBgkqhkiG9w0BAQsFADBPMQswCQYDVQQGEwJT +RTEXMBUGA1UEChMOU3dlZGVuIENvbm5lY3QxDjAMBgNVBAsTBWVJREFTMRcwFQYD +VQQDEw5TQU1MIEVuY3J5cHRlcjAeFw0xODA5MDEwMDAwMDBaFw0yODA5MDEwMDAw +MDBaME8xCzAJBgNVBAYTAlNFMRcwFQYDVQQKEw5Td2VkZW4gQ29ubmVjdDEOMAwG +A1UECxMFZUlEQVMxFzAVBgNVBAMTDlNBTUwgRW5jcnlwdGVyMIICIjANBgkqhkiG +9w0BAQEFAAOCAg8AMIICCgKCAgEAncnQs7F6x3l7WDWfzWQ1YI3nRPRAmou/6wfu +t/Q/0Lrk2qC1t0cKXVcwgjYjond7mNgTl8rUBIheI4KLOzX48diUOs+aNz21EjPP +qGpgq3HzS9AAs7yw8ZEG5Y/G2KTLrxG9DO/zhy+mXcRle+zGJh8jc5MBqz2xnSMj +drRNWlIuAQ+hrlEiJw70+ezZIB3Y0KWwAKSN+CMNXzNoxuCd4hiSocga74guoLu7 +borpf6Z+i9Iry+L1+jTRPzPdeoEdVI45a2Oy3x9up5Oag9ehIeqJqEQZOtrJj45Q +FiQgYEEVOB7YAFKSwf426eSOyDNfcYlZGC9+p/hAxsJAptOlfiW5OFhKvsdc4t6l +t43U4GqKT+gDGvk8WOMCTkcJBfDkRMbSHA7ZnmF3xmkfROUjh5/OiypVUpjQDxTi +wd2F7lc0w5qMiWbLTUIGYtbsVdLcsZ3npkxxYSV/b4GnR1QDQgktDol2ksQUFYaW +a301l7zLoKHVXbXIZu569VFVtgB8SeJwaqIEsOqyLpLUzCL+27cpPhenW1hZ4ZAY +R0kEWu8tUL8IEplG96NGSuKF0KM3hrRGC80wW8epHKHcjVlPnAALWSrXh86N+6kw +cf9vKETYCZAWo8QUC0MWNB9yH+JR6whsrmBcywNTnyAtPc00gYY4DbzaWgbjCJNx +cI9rHKUCAwEAAaMSMBAwDgYDVR0PAQH/BAQDAgUgMA0GCSqGSIb3DQEBCwUAA4IC +AQBvu+YkEyb6JBIVaRfDGk04ggJEZcBMjfP8JH4bCDTkHJW8vTGIADLuONd/LR0z +hmjWILQ/kZWtqmgm7RTduMQfLm1Pl/s2Zj4dRM4KfYGHSuqDOUhOqP8BcvXesx8e +YoD3ui8V5Uo2mnbajJOTSTd5AXEMheujBaMzVQ1G8sT6FPVBPP2jXuQyOS+sSOr3 +vRRN+hEMkI2D6b6h20Nu2CFdDP+q9QSbbRf9Igx+h9lJ+VhWgsytHsRIIzq5Watg +rx2cfXOvhgagMomgDmOFD0YrRRjqPH7wYDwcc4W7si3TilP54lfnl6pEG9HCK31t +cVwdMc06lSh3LLpfiYQUBi7Q68p5F9T6oNL71Ii+v99ouDqiDsrcP3ouS5OK5RrY +4w2nw9993xU0Dp3s307OY/5FAUc7PGagTbx464FTXNDXA9nNKW/Z6Fy+c3IwA0fb +ZtqsCoet9DiJr9OG5awC33KeNB95a6WVym/My4WgNeZUHUoI4SnmtELUr4h1IO/2 +y6nm2r4haoS5OUw+cxBYYP/LXTDaF759AYJEcOYOqad2IBFChMcC3Sk45XPXwfE9 ++AyNq6gwRzqtqsCnDB65g7zSGYZUsTJSAMlEzcrTpksBAgirZmCMsJVLEAJgqCwn +j00m1WNvgK2Fj71hjOONvhwP5gj0bwy+1b8GY0+A/RObSw== +-----END CERTIFICATE----- diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/general-metadata.properties b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/general-metadata.properties new file mode 100644 index 00000000..8a090155 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/general-metadata.properties @@ -0,0 +1,18 @@ +psgen.country=${proxy-service.country} +psgen.name=Sweden eIDAS ProxyService +psgen.orgName={\ + en:'Sweden Connect',\ + sv:'Sweden Connect'\ +} +psgen.dispName={\ + en:'Swedish eIDAS Proxy Service',\ + sv:'Swedish eIDAS Proxy Service'\ +} +psgen.orgUrl=https://swedenconnect.se +psgen.supportGivenName=Customer support +psgen.techGivenName=Technical support +psgen.supportEmail=support@swedenconnect.se +psgen.techEmail=support@swedenconnect.se + + + diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/idpdisco.properties b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/idpdisco.properties new file mode 100644 index 00000000..a4300755 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/idpdisco.properties @@ -0,0 +1,56 @@ +# Available policies are: natToEidasMapping, natToEidasNotifiedMapping, justEidasLoa +# Defined meaning: +# - justEidasLoa = IdP is only allowed if it supports the national eIDAS LoAs +# - natToEidasMapping = National IdP:s are allowed to respond with national LoA. These counts as non notified eID +# - natToEidasNotifiedMapping = National IdP:s are allowed to respond with national LoA. These counts as notified eID + +idp.freja.entityid=https://idp-sweden-connect-valfr-2017.prod.frejaeid.com +idp.freja.loapolicy=justEidasLoa +idp.freja.consent=false +idp.freja.deriveDob=false +idp.freja.privateSpSupport=true +idp.freja.index=0 + +#idp.testIdp.entityid=http://qa.test.swedenconnect.se/idp +#idp.testIdp.name.sv=Test ID-tjänst +#idp.testIdp.name.en=Test IdP +#idp.testIdp.logo.uri=${proxy-service.domain.prefix}/img/se-flag-rnd.svg +#idp.testIdp.logo.height=67 +#idp.testIdp.logo.width=68 +#idp.testIdp.loapolicy=justEidasLoa +#idp.testIdp.consent=true +#idp.testIdp.deriveDob=false +#idp.testIdp.index=0 + +#idp.mobIdp.entityid=https://midp.svelegtest.se/idp +#idp.mobIdp.name.sv=Legacy Test ID Tjänst +#idp.mobIdp.name.en=Legacy Test IdP +#idp.mobIdp.logo.uri=${proxy-service.domain.prefix}/img/se-flag-rnd.svg +#idp.mobIdp.logo.height=67 +#idp.mobIdp.logo.width=68 +#idp.mobIdp.loapolicy=natToEidasNotifiedMapping +#idp.mobIdp.consent=false +#idp.mobIdp.deriveDob=true +#idp.mobIdp.index=1 + +#idp.ccBankid.entityid=https://eid.identityhub.se/demo/bankid/ +#idp.ccBankid.name.sv=BankID +#idp.ccBankid.name.en=BankID +#idp.ccBankid.logo.uri=img/disco/bankid_logo.png +#idp.ccBankid.logo.height=94 +#idp.ccBankid.logo.width=100 +#idp.ccBankid.loapolicy=natToEidasNotifiedMapping +#idp.ccBankid.consent=true +#idp.ccBankid.deriveDob=true +#idp.ccBankid.index=2 + +#idp.ccTelia.entityid=https://eid.identityhub.se/demo/teliabrowserplugin/ +#idp.ccTelia.name.sv=Telia +#dp.ccTelia.name.en=Telia +#idp.ccTelia.logo.uri=img/disco/telia_min_logo.png +#idp.ccTelia.logo.height=89 +#idp.ccTelia.logo.width=86 +#idp.ccTelia.loapolicy=natToEidasNotifiedMapping +#idp.ccTelia.consent=true +#idp.ccTelia.deriveDob=true +#idp.ccTelia.index=3 diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/favicon.ico b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/favicon.ico new file mode 100644 index 00000000..2c33a9cf Binary files /dev/null and b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/favicon.ico differ diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/sweden-connect-color-yellow-on-blue-no-text.svg b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/sweden-connect-color-yellow-on-blue-no-text.svg new file mode 100644 index 00000000..b9930ac4 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/sweden-connect-color-yellow-on-blue-no-text.svg @@ -0,0 +1 @@ +yellow-on-blue \ No newline at end of file diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/sweden-connect-color-yellow-on-blue.svg b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/sweden-connect-color-yellow-on-blue.svg new file mode 100644 index 00000000..2dad5586 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/img/sweden-connect-color-yellow-on-blue.svg @@ -0,0 +1,123 @@ + + + + + + + + + + + image/svg+xml + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/infotext.md b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/infotext.md new file mode 100644 index 00000000..97a21920 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/infotext.md @@ -0,0 +1,37 @@ +### Proxy Service + +This is the Swedish proxy service of the Swedish eIDAS Pilot + +- Application ID: **${proxy-service.applicationId}** +- Supported eIDAS protocol versions: **${proxy-service.eidasVersions}** + +**Relevant resources:** + + + + + + + + + + + + + + +
Sweden Connect Home Pagehttps://swedenconnect.se
eIDAS Proxy Service Metadata${proxy-service.domain.prefix}/ServiceMetadata
National SP Metadata${proxy-service.domain.prefix}/nat-metadata
Private Sector SP Metadata${proxy-service.domain.prefix}/nat-metadata${proxy-service.private-sp.suffix}
+ +**Metadata validation certificate:** +
+ + +``` +${proxy.service.metadata.cert} +``` +
+ +**Developers:** + +>Stefan Santesson
+>Martin Lindström diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/metadata.crt b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/metadata.crt new file mode 100644 index 00000000..a4750708 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/metadata.crt @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFIjCCAwoCCQCVO3v9xSA+FDANBgkqhkiG9w0BAQsFADBTMQswCQYDVQQGEwJT +RTEnMCUGA1UECgweU3dlZGlzaCBFLWlkZW50aWZpY2F0aW9uIEJvYXJkMRswGQYD +VQQDDBJRQSBNZXRhZGF0YSBTaWduZXIwHhcNMTcxMjE5MTIyMDI1WhcNMjcxMjE3 +MTIyMDI1WjBTMQswCQYDVQQGEwJTRTEnMCUGA1UECgweU3dlZGlzaCBFLWlkZW50 +aWZpY2F0aW9uIEJvYXJkMRswGQYDVQQDDBJRQSBNZXRhZGF0YSBTaWduZXIwggIi +MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDYzcmlNTMkBzIYUXxT13zNMakh +xR9BO1Qnlt2euUNdvL8FhgiNo+2AJDxFWts8nsg9Jam15F38nTqRMt4r1zFHYFJ5 +22h8urckpwvFVu/kjQrY8pztLE/pPvGXLPlySDkiRifCGibXuACngZx5chCwNs2h +2OoMgKH7d5aZmUcB2mIc/Ybd98W9jtch1gh5/QM0aJsYnDTYuB840YGwHXCyiBUf +1teUT9bJ/Y90OSXBdib9kuOmtQNMTYtyX8FAodYXVx8ibXNDfhdGaBJh+2J4lFTA +DQQ1tM1YigZyvBuslBcuLDfZce0OaWPYPAf8PE8voxJhGkA026GGNjXP/9nRK146 +bkN4nd/Aa6842aYEOjjcDAl43tjHKZBu0+pnq/2GRiN7Dw4Y+Td/2y8PqD/W87CV +ttrU6yniSMr7Y1+TfzzESSVPXs+csyatH9MJ2IA184Oh7TL6tPh5N96ugh7s85pN +zswG+Gouw1BVCfqpSJmmNMheEOr6igOYQ0LY5aOooLoqET9gu0ks9cixjANFhnhE +vRVkMfbnFVAnvXQEWPQY5NgqO4b0Z65ey011L+slNo6EIiw0FkznAwER0aYzrM2r +hs/hJAAbjnxEhgMKN9bdoXpnrAehwbTOTipOWwrdcd3IKNdDEyFY15j5rGgyIBcK +8gNnvGJLKcaC4vBd1QIDAQABMA0GCSqGSIb3DQEBCwUAA4ICAQBuws48HrfwW/Eq +WN4+VSZ1cMgkp/mgqyyDdXoCPUf5o7ro17oDSocmpdQypiCr6M88MACBX8cqKmie +kIyptrzp1x2seo8rTJpno97dt3hSwbe6+SbRh2bjDpDzL2ecrtv/GXjR41b2CbMO +wu4WTgiFhWmKGNDNcEem37VUpKEYe7u/ucie71AQi49jM0rJ5uSVdBONKj3iAH5d +mckw2nt6HKMJ0S+ckM/aq+m8ACgAyYmMr74Yt6wcpl/NORtIxaGUeT7Z8rN7TUmk +gP9scbYF16xJJkxtylnK2BrSwSFOIuB5KJo2xxhuMffxEgdy4711TfwMCUaTPKmF +dlYzPKeBaYzWFU42jcVsiQz4mSqgvS2dS8nZpYe2K0zHIzKwytn+HQ36KhRRDAVR +7aKH9S8FZJXC6wqXFdEwwZujkGhu/BxgfjGkde8qOQMUwHboX9+aflQ9okB1Tha6 +xVB1kG86WdgJLmrsfqaX1FVyO761ZXYHTuoAZ0iuzIRhteUksfRZchnKpUX0fF1i +yB9M0E6JfqvFeVfLlo8c2FI4MUYFWgqciizaXSfw0waMFdX5+U33eXr1RWF0POZX +JERf83JkjVLanESP9/U9nsZYgIiSX88PahYtuSZLhqamzzFvK+wuVcNKark8s1kS +2d8EIOY6h4jmS2ds9ORaavkV/xxTAA== +-----END CERTIFICATE----- diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/natsp-metadata.properties b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/natsp-metadata.properties new file mode 100644 index 00000000..03cca74a --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/natsp-metadata.properties @@ -0,0 +1,26 @@ +#EntityID of the n +natsp.entityId=${proxy-service.domain.prefix}/nat-ps-sp +# Logos are specified as a map with the url as key followed by height,width[,lang] as comma separated parameters. +natsp.logos={\ + '${proxy-service.domain.prefix}/image/logo.svg':'60,171',\ + '${proxy-service.domain.prefix}/image/icon.svg':'32,32'\ + } +natsp.displayNames={\ + en:'Swedish Citizen Adapter',\ + sv:'Sveriges internationella legitimeringsnod'\ + } +natsp.descriptions={\ + en:'Swedish eIDAS Service',\ + sv:'Svenska eIDAS Tjänsten'\ + } +natsp.assertionConsumerServices={\ + 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST':'${proxy-service.domain.prefix}/assertionconsumer'\ + } +natsp.nameIDFormats=\ + urn:oasis:names:tc:SAML:2.0:nameid-format:persistent,\ + urn:oasis:names:tc:SAML:2.0:nameid-format:transient +natsp.entityCategories=\ + http://id.elegnamnden.se/ec/1.0/loa3-pnr,\ + http://id.elegnamnden.se/ec/1.0/eidas-pnr-delivery + + diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/pkcs11.cfg b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/pkcs11.cfg new file mode 100644 index 00000000..8b5c002d --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/pkcs11.cfg @@ -0,0 +1,33 @@ +#SafeNet Luna +name = Luna +library = /usr/safenet/lunaclient/lib/libCryptoki2_64.so +description = Luna config +slot = 6 +attributes(*,*,*) = { +CKA_TOKEN = true +} +attributes(*,CKO_SECRET_KEY,*) = { +CKA_CLASS=4 +CKA_PRIVATE= true +CKA_KEY_TYPE = 21 +CKA_SENSITIVE= true +CKA_ENCRYPT= true +CKA_DECRYPT= true +CKA_WRAP= true +CKA_UNWRAP= true +} +attributes(*,CKO_PRIVATE_KEY,*) = { +CKA_CLASS=3 +CKA_LABEL=true +CKA_PRIVATE = true +CKA_DECRYPT=true +CKA_SIGN=true +CKA_UNWRAP=true +} +attributes(*,CKO_PUBLIC_KEY,*) = { +CKA_CLASS=2 +CKA_LABEL=true +CKA_ENCRYPT = true +CKA_VERIFY=true +CKA_WRAP=true +} diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/psidp-metadata.properties b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/psidp-metadata.properties new file mode 100644 index 00000000..dc936c7a --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/psidp-metadata.properties @@ -0,0 +1,36 @@ +psmd.gen.entityID=${proxy-service.domain.prefix}/ServiceMetadata +# Protocol version is the supported eIDAS protocol version. A coma separated list of versions may be provided if more than one are supported. +psmd.gen.supportedProtocolVersions=1.0,1.1,1.2 +# Application ID prefix MUST have the format {provider name}:{application ID}: e.g. "SE-eidas:proxy-service:" +psmd.gen.applicationIdPrefix=SE:proxy-service: +psmd.ext.supportedEncAlgos=\ + http://www.w3.org/2009/xmlenc11#aes128-gcm,\ + http://www.w3.org/2009/xmlenc11#aes192-gcm,\ + http://www.w3.org/2009/xmlenc11#aes256-gcm +psmd.ext.supportedSigAlgorithms=\ + http://www.w3.org/2001/04/xmldsig-more#rsa-sha512,\ + http://www.w3.org/2001/04/xmldsig-more#rsa-sha256,\ + http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256 +psmd.ext.supportedDigestAlgorithms=\ + http://www.w3.org/2001/04/xmldsig-more#sha384,\ + http://www.w3.org/2001/04/xmlenc#sha512,\ + http://www.w3.org/2001/04/xmlenc#sha256 +psmd.idp.nameIDFormats=\ + urn:oasis:names:tc:SAML:2.0:nameid-format:persistent,\ + urn:oasis:names:tc:SAML:2.0:nameid-format:transient,\ + urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified +psmd.idp.ssoList={'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST':'${proxy-service.domain.prefix}/ColleagueRequest'} +psmd.idp.supportedAttributes=\ + http://eidas.europa.eu/attributes/naturalperson/CurrentFamilyName,\ + http://eidas.europa.eu/attributes/naturalperson/CurrentGivenName,\ + http://eidas.europa.eu/attributes/naturalperson/DateOfBirth,\ + http://eidas.europa.eu/attributes/naturalperson/PersonIdentifier,\ + http://eidas.europa.eu/attributes/naturalperson/Gender +psmd.idp.assuranceCertifications=\ + http://eidas.europa.eu/LoA/high,\ + http://eidas.europa.eu/LoA/substantial,\ + http://eidas.europa.eu/LoA/low,\ + http://eidas.europa.eu/LoA/NotNotified/low,\ + http://eidas.europa.eu/LoA/NotNotified/substantial,\ + http://eidas.europa.eu/LoA/NotNotified/high +psmd.idp.termsofaccessRequesterId=true diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/sign.crt b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/sign.crt new file mode 100644 index 00000000..cc2d612d --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/sign.crt @@ -0,0 +1,30 @@ +-----BEGIN CERTIFICATE----- +MIIFKDCCAxCgAwIBAgIEBEA5gTANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJT +RTEXMBUGA1UEChMOU3dlZGVuIENvbm5lY3QxDjAMBgNVBAsTBWVJREFTMRQwEgYD +VQQDEwtTQU1MIFNpZ25lcjAeFw0xODA5MDEwMDAwMDBaFw0yODA5MDEwMDAwMDBa +MEwxCzAJBgNVBAYTAlNFMRcwFQYDVQQKEw5Td2VkZW4gQ29ubmVjdDEOMAwGA1UE +CxMFZUlEQVMxFDASBgNVBAMTC1NBTUwgU2lnbmVyMIICIjANBgkqhkiG9w0BAQEF +AAOCAg8AMIICCgKCAgEAoDCg0aSB43LoPFwh0gB9ZyQ6c5MRHddSDfdyZW2Z20bo +EML62j3spRnBXG83orL40w3CzbXVu3j4gaCSx+Qt8sGKW9mk2PY8S+h6Xieg18Rw +SP0eZRoAfacxufejvKHUg4nSLdT8k8RjiVkLjPMyTwqHlhusFU/OiGdT82B9aYJa +ekiKVqLorv6VBIFu2j3KJ7mKJN3xxjeSWyHlKVvVmJ7slarp69ndGV5AJNtnDK5Y +KbEzgKslIUicP3rmnqgCSKBUlA3ppYxArUy6IJLGiKmv74/Sc2tRpsCXwVgFouC/ +sj2Mpksab0wTzXomZ7oXMb35M12duiltPXgnLhMuH4GjEYlPBaaQl1ilAAvk/e29 +xpT2jIR5tl0RF9rUqYlpJqyLq5/jRjyUXOTWwVQ5/oQ65iYXuoA9EYxkAE1bYCf9 +rKMPUcczqiThzHzaYUs/mkAoLgBMtLSf2K84ztWZrbUzDa4RBTfeXmZhHyjenTSC +KgBqnN2s89VOgy/+hB8EmTeSHg4BOoJ56zjOr/EOifUQCey2PetA9rMUd7MkMv49 +hdVWKdk9fIrAmmEaVtU5uMajmCTiZItMbtEbmBtYfFOZmE0BoI1/g3wu393tY/oF +vMrGrGf2gFUc/o63IrlSDpZLv/hmKfmpmreZpY6yi3pAVs9wiuDRZsaQcV8dpIMC +AwEAAaMSMBAwDgYDVR0PAQH/BAQDAgeAMA0GCSqGSIb3DQEBCwUAA4ICAQBt3yH5 +jXx63IFWA+jWdLdAn/MSJNT19vwuC5KVgDdlnv/bWj6u3uCmBvHUVsNMcTuOJXN2 +KOverRvdzStwW2yHmNn8PX4Yn4IVLSYdYNlrxp4DvL97WwnpxV2tASaRZ3eUMrh5 +sQaG/IqdJ1lCS78PyiE+kVzF0oNUbk1ba0N2Hvlc6LeA5Sy0lbaqT0PTU6xF5lec +9azRPc3S2GiGl5BLRBcJvMjJzBBQ6yD4dXPY4nFQSWdgp7VW6FnvY6jnj2mmLVn8 +HYLB7hSxev3vCqt5vOEWXCi/zDM/YU5/SwbvZQ/vdkFGIEaJNSBGLq8As3uljmPd +byLHu2wpW7/hVZpD6fYVG+0nghu23lwZ+l0KQKU4AleHulMJUaYkprP4LhC3mRAO +jaJwlMn4hdGEV38zauukvwspxEmZ52UAEAhS1+NPLIm0gjR/s3S+U4HNpJjvqm+T +BI3VAH8TV9bJ0FGf1jPZ5ZM0AsLearM5AO9peQ2xRvC9tLrpCnfk84HZF6KvZCzo +egUxh55BXfCs5n/xhKU5ZLzbetkNLHXFsd3F2KAg3ny+vTxaTpY/rBCvsOKI98Fo +ybRdsPn1zskNyGXdZi3yxVYa0lvEWf7VyG9svLSfF7xjN/pc7vj/nspCZK6B/q5+ +wAO+aJg4t0V8ZXu8gI23LFpiMNhjqkSQ6ZuIGA== +-----END CERTIFICATE----- diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/swedenconnect-signer.crt b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/swedenconnect-signer.crt new file mode 100644 index 00000000..8466ecfe --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/swedenconnect-signer.crt @@ -0,0 +1,35 @@ +-----BEGIN CERTIFICATE----- +MIIGFTCCA/2gAwIBAgIJAMRMtpYesnyPMA0GCSqGSIb3DQEBCwUAMIGgMQswCQYD +VQQGEwJTRTESMBAGA1UECAwJU3RvY2tob2xtMRIwEAYDVQQHDAlTdG9ja2hvbG0x +IjAgBgNVBAoMGUUtTGVnaXRpbWF0aW9uc27Dg8KkbW5kZW4xFzAVBgNVBAsMDlN3 +ZWRlbiBDb25uZWN0MSwwKgYDVQQDDCNTd2VkZW4gQ29ubmVjdCBtZXRhZGF0YSBz +aWduZXIgdjIuMDAeFw0xODA1MzAwOTIzMzVaFw0zODA1MzAwOTIzMzVaMIGgMQsw +CQYDVQQGEwJTRTESMBAGA1UECAwJU3RvY2tob2xtMRIwEAYDVQQHDAlTdG9ja2hv +bG0xIjAgBgNVBAoMGUUtTGVnaXRpbWF0aW9uc27Dg8KkbW5kZW4xFzAVBgNVBAsM +DlN3ZWRlbiBDb25uZWN0MSwwKgYDVQQDDCNTd2VkZW4gQ29ubmVjdCBtZXRhZGF0 +YSBzaWduZXIgdjIuMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPer +La2IxQHWRFvX5mC8OgYSsZTjNcEGz0vLwBsdckQiBWWgrLdnU6+raS/SlriY4qcZ +g8CJkhj8CdLBn6UxwdwOy+tGYjyAFCkV2yQ68euyNqwWgT6iiq/dn1kjWzamC18H +U0LN/c7eieldhdI8edSF9Z6Drjt7s8glP4Lrd1FM5NXWros06fpEs61BoMZrIyei +ptB4M7XBGJW6mQx3trnN4FnDZIyzNf9H+Z4XvXnn/URLMd0S3hS2uxVS7OGluKY6 +hhXfpcOGwUKcQmE7coI0mhZ9TAsG7h++J/A7aBp3eWr9eXzeFmwg7sHRBtd3LaD+ +yBLXuUFaPHJyOSFCeiys1O1Oh2CGpJIfPHlqmCQmTQrNEtioJyPRVAZamwio+mYt +EsI8ssPW3/FNEe93cHd88BDhCDtz5oiQiGyflsCWSh4SwjFVVw7jgRGzmkn2TfHv +yjiiexS8LeleqwMQ95e9dcVbktxBvDnPd0xCAXVL0y2P31DXLYe/2806C/21KWRU +Z/EtLTQKpxJWhqsZwSZSpxjb6h3l8D9HAm5w4I/4w3JB40R7GJFWtuwh+clRnzC2 +xtN9cGfe+LXG0SG6ObUu9XBVBwNIL2xNgz+eSCv1n/8hlahoZySLtj0AKFQPyWvw +Bitvvwk8uq3NPpBiz2nilHG3nnzlp+TK6+pjOHOrAgMBAAGjUDBOMB0GA1UdDgQW +BBTqVEEVOf9SV47Nz0su8/MYAWOy4jAfBgNVHSMEGDAWgBTqVEEVOf9SV47Nz0su +8/MYAWOy4jAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQAXjshVZ5td +ZqClqmZUEEWFh8oDk8lrRkZfXUmThQiKYq7NrLecbquDh1Mglq3zVxndZMAZVzrQ +3U/EJ7B+LXfd5fnl91+qb5d1bJBs/Om/AyFA/bBnOyYPzkZWf+M8nItzQyOJX7ZO +kzIOakaet6HR6T7ADk7vfSjqnRLywNL/cq3/if9c5WGh5NUSteltuDHOsm3DwvN4 +aFP+rngiYF1j509wbZOO7koIwZZUG9g0Etv0T8u7xXyZkYxjEfrr4uMf6121PoaP +7mMU1Msuqw7idRMOj7mL5tIpu1ihw/a2pWqaXkxNsQXpOv+HtpBZ28pzqAtcHt8q +r5V5Gm+W37RMlnIDsJwgEfA6FKEDqahSRmYnh8v+F9aDRDpGYpwRtK3k0tiy9Kvp +8o16aCCqLtFU+Lme2NzkcFQubPmkan21M6/VTGP7UrgtvhXAaqYcTQBq/YJ4TiXz +SBZgjywUi1nMZAzG4KS4jFR27Kdiul3G10I/M7nPtNq51uNspiO117zRo/8qD4wE +BOoxiQw0f7/UPW8uznHU3DR3JUkTTlUfKHrfB7RZvkqw15bLkH8DpgINkjW+PFzI +OkY6KYbZj/wwCYBw3rxMb4oY3Lv0S6cLmLvxmkG8eizY9ymwNlr/YAwPeyzuLPRf +j6+cBKFT97et/lUMyfKVwbmuJNgtABRRcw== +-----END CERTIFICATE----- diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/syslog.properties b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/syslog.properties new file mode 100644 index 00000000..17363cc2 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/eidas-proxy/se/cfg/syslog.properties @@ -0,0 +1,23 @@ +# Parameters: +# - host : Arrray of hostname or IP adresses separated by comma. +# - port : TCP or UDP port +# - protocol : udp, tcp or ssl +# - bsd : Using message format RFC_3164 when set to true. Using RFC_5424 (UDP) or RFC_5425 (TCP) when false +# - facility : The syslog facility identifier (0-23) +# - severity : The syslog sverity code 0-7 +# - clienthostname : Name of the sending client host +# - clientapp : Name of the sending client application + +syslog.1.host=log-1.sveidas.se +syslog.1.port=514 +syslog.1.protocol=udp +syslog.1.bsd=false +syslog.1.facility=19 +syslog.1.clientapp=eidas-proxy-service + +syslog.2.host=log-2.sveidas.se +syslog.2.port=514 +syslog.2.protocol=udp +syslog.2.bsd=false +syslog.2.facility=19 +syslog.2.clientapp=eidas-proxy-service diff --git a/eidas-test-proxy/overlay/etc/eidas-proxy/se/ps-mdcache/.placeholder b/eidas-test-proxy/overlay/etc/eidas-proxy/se/ps-mdcache/.placeholder new file mode 100644 index 00000000..e69de29b diff --git a/eidas-test-proxy/overlay/etc/luna/cert/server/CAFile.pem b/eidas-test-proxy/overlay/etc/luna/cert/server/CAFile.pem new file mode 100644 index 00000000..c8990f09 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/luna/cert/server/CAFile.pem @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDNTCCAh2gAwIBAgIBADANBgkqhkiG9w0BAQsFADBeMQswCQYDVQQGEwJDQTEQ +MA4GA1UECBMHT250YXJpbzEPMA0GA1UEBxMGT3R0YXdhMRYwFAYDVQQKEw1DaHJ5 +c2FsaXMtSVRTMRQwEgYDVQQDEwtzZS10dWctaHNtMTAeFw0xNDA1MTMwMTE1MDha +Fw0yNDA1MTQwMTE1MDhaMF4xCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlv +MQ8wDQYDVQQHEwZPdHRhd2ExFjAUBgNVBAoTDUNocnlzYWxpcy1JVFMxFDASBgNV +BAMTC3NlLXR1Zy1oc20xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA +uEOQnpKAiWov+y5tzljds8FXZ1/u4K5mVvt6uT+uC9TyzleQ/Mvy+s96hgv32CH2 +Wb1hbnVoOg/r5cxaplmLtLAy4KQPEmEfYsoftGXc+sNhjNQaP7Sv+PVJooFEEvxP +sicnHK2Iw0+2I5yYfnNe2k1L0Kl2EJWLS3tq2l6w6RPD/ldf21lXmB+RE7j3QEx/ +ALqLuqbiyg8tR6iamTQBM9IotG1jBIh5InVStZqV9bzyLIebNUjkyta2uCw4RCcM +lxJpLm7HOpuDf4iLVLW5BwRLJMHBoHJ5hK7Rw9vpwUhL5ujwZ8ugiYwiYtgXUuia +b8WgGuo5zRNA1Zm2TrvNqQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQA3/xEbq4gP +sOrH66HHToRUoGvkD90uhYwinYNmE7KBTAFhvbnlCeOcQGo88DoVZgkYJNLpMD4K +bhyyyNcVVt6UYHzt00N5XfuqwEy1C1QqZaeNZiyADvLLBftjym/VHth70Eu5WjHo +f02uDEU3DkaWuFRrAqBGkkFLJwrNua0qr1vnqe5LBipOCkXPSCAUYW5iJmESeolD +BzA3AP1ykXh7HvrinY4zeALleFAJ6cur6qXkpe3B4h/s/vT0IMvxTZzDVMz3i4Pd +jKFAV6RbM4jygP3LNj4XseODrZj5IM9O/WEjbv8J/E7E9ON05oWDkQbZwAvklaXF +9ez3C8WAI1q+ +-----END CERTIFICATE----- diff --git a/eidas-test-proxy/overlay/etc/luna/cert/server/lla-hsm2.sunet.seCert.pem b/eidas-test-proxy/overlay/etc/luna/cert/server/lla-hsm2.sunet.seCert.pem new file mode 100644 index 00000000..ef3c6632 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/luna/cert/server/lla-hsm2.sunet.seCert.pem @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDLzCCAhegAwIBAgIBADANBgkqhkiG9w0BAQsFADBbMQswCQYDVQQGEwJDQTEQ +MA4GA1UECAwHT250YXJpbzEPMA0GA1UEBwwGT3R0YXdhMRYwFAYDVQQKDA1DaHJ5 +c2FsaXMtSVRTMREwDwYDVQQDDAhsbGEtaHNtMjAeFw0yMDAzMzAxMTI1MzNaFw0z +MDA0MDExMTI1MzNaMFsxCzAJBgNVBAYTAkNBMRAwDgYDVQQIDAdPbnRhcmlvMQ8w +DQYDVQQHDAZPdHRhd2ExFjAUBgNVBAoMDUNocnlzYWxpcy1JVFMxETAPBgNVBAMM +CGxsYS1oc20yMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8UKBj61 +aja8nrXkMt7k5dFVAK5uufEyZ0JFeL3P7/9kVtoonh5VV8qTcwRPGjPK2pK4ZkwW +YrwQwYU9I7XjnVjYRyEUKxyoGkBGmSUVccNKIHZI5CC6j/vA1e+eV3Pm7zBpD1Xn +CBNS5s/bO4VU9/7G0VMRubjwhjjssVs68fH25Au3Vw0p8IeiacFzON6SZr+6j0BN +jQ6p2q43phwOhUWYSdhufI1Yfn8jel4jGJjc97jDdFJqCCScRpyyARjxjgPJlS5v +Pp2n8LmCNt4tnjbLGqV9Vf/2mUnyfskEx2xqnfuQTVLoAKE5c9kaanWbesEx1C1Y +Oj2tHgpujrdtzQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQCkWHw+RIwtT7OfmFOJ +YlJBKOgI0BgIo0dXMsm9+mEBuLyNIo5QL3Nw87/vke5Yn27J1/Q+ihW4JAj4JnQ6 +rBhm6Ns/6aqr2YWovRXo4R/N537qk9jhi5gff7L4NQrgiTUEgQ2kAQGAgzaSmD/+ +GSs9qY5gICCik5evthyeJhTDnp5eBaozjcIEEDTxtTg+xBm/gPraMQGl3hNC+p3E +KFCf+AlIDSxIV3CjT/MDUYklsBFR2g2DVI49VKxoRU1Iloer0p2NvmtPUXn9bMXt +X6GatvYxwNsiWVVYrNyIYUPQ59lihjQNibSIl5yqdXlhVY8pg5Xq9X1TOEMqUQ3l +gQn2 +-----END CERTIFICATE----- diff --git a/eidas-test-proxy/overlay/etc/luna/cert/server/sthb-hsm2.sunet.seCert.pem b/eidas-test-proxy/overlay/etc/luna/cert/server/sthb-hsm2.sunet.seCert.pem new file mode 100644 index 00000000..c1535970 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/luna/cert/server/sthb-hsm2.sunet.seCert.pem @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDMTCCAhmgAwIBAgIBADANBgkqhkiG9w0BAQsFADBcMQswCQYDVQQGEwJDQTEQ +MA4GA1UECAwHT250YXJpbzEPMA0GA1UEBwwGT3R0YXdhMRYwFAYDVQQKDA1DaHJ5 +c2FsaXMtSVRTMRIwEAYDVQQDDAlzdGhiLWhzbTIwHhcNMjAwMzMwMTE1ODI3WhcN +MzAwNDAxMTE1ODI3WjBcMQswCQYDVQQGEwJDQTEQMA4GA1UECAwHT250YXJpbzEP +MA0GA1UEBwwGT3R0YXdhMRYwFAYDVQQKDA1DaHJ5c2FsaXMtSVRTMRIwEAYDVQQD +DAlzdGhiLWhzbTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdBdk +uZy+YbKhwwHkFlJispF7wxMChFuuhpGDtDogYYEgGAR9j5aMGuz8t07pNbAX+Oex +SYENEJYvLKCHXMgitZiDioKcdXCNlOGBJV4Y5dubrS1+ocOmJnr0mJPtm6RzAsIU +UeqhIcw/JllHYnHHyHQeQprGn2v6l0J9PRwAc12Xja2p/eSvGR3bC4VyMQl9PB1r +KrPCdGrXfUFpBSdrU2308RvBLNl4tjnaXHcSD7/s26QGHPJSQDqmXYZDl0MiCZi2 +eLm1hP3TAvXbHjE1kYv81zUVYNnANLFZLUHgFZhfMqOM+91sHcOaaeGx1ZtAZZO5 +GFVeAhg7u4PlqLapAgMBAAEwDQYJKoZIhvcNAQELBQADggEBACsHjivOVHSFlKgN +zHG0CyaKY13YyLRi8PtbDKB5qiJuD7LGjveVal+SD+AIYtG60o9bF3X1xCkNDcLt +imlfq1L39OawDbEvJZGOLGIqJDfMbEqWIUGiFureQ+4zWBD81iIHUuQ+BPDUU9zu +xfdkchy9S2wzqP1q7of3wN0HbHj2UdwIIMipyO81bqfwCyW4xjDDRY+L9zMTGOAe +hoqgjC/ZLYkgfkWp3THWzQ6ZBeYedU97nEaZkXJDsOwseWol9mrL5wuzDCAZjm9J +LyjLbTDcNn7Gy74sF7nHiRsiW+Kb1zkOisFCE457+0sQFdK/0XhrCug66sBCC673 +z/6pegM= +-----END CERTIFICATE----- diff --git a/eidas-test-proxy/overlay/etc/luna/cert/server/tug-hsm2.sunet.seCert.pem b/eidas-test-proxy/overlay/etc/luna/cert/server/tug-hsm2.sunet.seCert.pem new file mode 100644 index 00000000..3d9d72b7 --- /dev/null +++ b/eidas-test-proxy/overlay/etc/luna/cert/server/tug-hsm2.sunet.seCert.pem @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDLzCCAhegAwIBAgIBADANBgkqhkiG9w0BAQsFADBbMQswCQYDVQQGEwJDQTEQ +MA4GA1UECAwHT250YXJpbzEPMA0GA1UEBwwGT3R0YXdhMRYwFAYDVQQKDA1DaHJ5 +c2FsaXMtSVRTMREwDwYDVQQDDAh0dWctaHNtMjAeFw0yMDAzMzAxMjEyNTZaFw0z +MDA0MDExMjEyNTZaMFsxCzAJBgNVBAYTAkNBMRAwDgYDVQQIDAdPbnRhcmlvMQ8w +DQYDVQQHDAZPdHRhd2ExFjAUBgNVBAoMDUNocnlzYWxpcy1JVFMxETAPBgNVBAMM +CHR1Zy1oc20yMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv13NhdzT +8gnTZ5Gfxp10CFJjxbG+wXsrFtnzqA0o6GRpNiuqPMEoTsUiE5AaqxhLz0N+y618 +YXGQ2wSX0FkjRHVih1e9vmEy1mlNc6x8VRAMaaHotXq58OI1NrotS/nVdVqZDc44 +C74FNhckS4cy4vAamG6j27H+IhnpJEbPI2vzS6ADY7Bdas6/CBwjUrvX8IlxnSpJ +4LYZ+mEL4DS+SOwo2QGX/wMwi3wXX/4ZwUj5N491me5lCJMB48ixulXu6bpa9yp3 +iFMPPa+886to1AbY1lv86m64daaBlkZSJtSFEjRNCNxqwV0e6DkqZnDfKHRBNNVu +ggRpD/5MFNanfwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQC4yhQjdluy9Uq04IKS +1O4VsC3gJTwJFxkdn9FoyYOBnpBeWVD0cgC/lnWSoqDV7d/EYDaIWhTxYKVZFq1I +OQ5+66gScfYAPtbNz5QfYtxzXa16HvI8b3SEQDruEsrwDmA+gmC++HFP4L6YLrIB +5BptWDPvWJO/TLrv44Oc9Ymjdb4RDHgUrWSZ1VznNQl7ILzNJkYbxOwxEuqVu3h8 +yujRM4TYolv6Ipx5/w6pKTOBofuGdcS6WsQJeGR4THy4sh+IfGwCcBSucXkhNvMy +/sQhcwPWc3sf5SSJzqfkpw53Ay+vPVLbhZVYGojvq7/JaTep8aRnGo/vELm7sUSL +HZHt +-----END CERTIFICATE----- diff --git a/global/overlay/etc/puppet/cosmos-rules.yaml b/global/overlay/etc/puppet/cosmos-rules.yaml index 204c7b4c..a05bbad5 100644 --- a/global/overlay/etc/puppet/cosmos-rules.yaml +++ b/global/overlay/etc/puppet/cosmos-rules.yaml @@ -1032,6 +1032,18 @@ log-1.sveidas.se: version: '5:20.10.6~3-0~ubuntu-focal' konsulter: autoupdate: + servicemonitor: + eidas_proxy: + version: 1.4.5_hsm2 + hostname: test.proxy.eidas.swedenconnect.se + spring_config_param: SPRING_CONFIG_ADDITIONAL_LOCATION + sunet::frontend::register_sites: + sites: + 'test.proxy.eidas.swedenconnect.se': + frontends: + - 'fe-fre-1.test.komreg.net' + - 'fe-tug-1.test.komreg.net' + port: '443' '^prid-[0-9]+\.qa\.sveidas\.se$': konsulter: