verglasz/soc-ops
0
0
Fork 0
forked from SUNET/soc-ops
Code Pull requests Activity

Added rt-test to SSO

Browse source
This commit is contained in:
Johan Björklund 2025-01-08 15:14:30 +01:00
parent f2a85f70d5
commit d7c3f0ffb3
Signed by untrusted user: bjorklund
GPG key ID: 5E8401339C7F5037
4 changed files with 115 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
rt-test.cert.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

File diff suppressed because one or more lines are too long

29
rt-test.cert.sunet.se/overlay/etc/shibboleth/sp-cert.pem Normal file
View file

@ -0,0 +1,29 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

1
test-sso-proxy1.cert.sunet.se/overlay/etc/hiera/data/local.yaml
View file

@ -105,6 +105,7 @@ saml2_frontend:
- metadata/intelmq.xml
- metadata/monitor-dev.xml
- metadata/graylog-dev.xml
- metadata/rt-test.xml
entityid: https://test-sso-proxy.cert.sunet.se/idp
service:
idp:

83
test-sso-proxy1.cert.sunet.se/overlay/etc/satosa/metadata/rt-test.xml Normal file
View file

@ -0,0 +1,83 @@
<!--
This is example metadata only. Do *NOT* supply it as is without review,
and do *NOT* provide it in real time to your partners.
-->
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_7df193350476d44f3fa55f99365c3966aecb001d" entityID="https://rt-test.cert.sunet.se">
<md:Extensions xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport">
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
<md:Extensions>
<init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://rt-test.cert.sunet.se/Shibboleth.sso/satosa"/>
</md:Extensions>
<md:KeyDescriptor>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:KeyName>shib_cert</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=shib_cert</ds:X509SubjectName>
<ds:X509Certificate>MIIFCTCCAvGgAwIBAgIUWGkJ6goaeBJepdux9W1LMjgaCT0wDQYJKoZIhvcNAQEL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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://rt-test.cert.sunet.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://rt-test.cert.sunet.se/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://rt-test.cert.sunet.se/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://rt-test.cert.sunet.se/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://rt-test.cert.sunet.se/Shibboleth.sso/SLO/Artifact"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://rt-test.cert.sunet.se/Shibboleth.sso/SAML2/POST" index="1"/>
</md:SPSSODescriptor>
</md:EntityDescriptor>