Shibboleth : Différence entre versions

De Wiki_DR13
Aller à : navigation, rechercher
(Certificats)
Ligne 60 : Ligne 60 :
  
 
== Certificats ==
 
== Certificats ==
 +
 +
openssl genrsa 1024 > /tmp/dr13.cnrs.fr.key
 +
openssl req -new -x509 -nodes -sha1 -days 7300 -subj "/C=FR/O=CNRS/CN=dr13.cnrs.fr" -key /tmp/dr13.cnrs.fr.key  >/tmp/dr13.cnrs.fr.crt
 +
openssl x509 -noout -fingerprint -text < /tmp/dr13.cnrs.fr.crt >> /tmp/dr13.cnrs.fr.crt
 +
mv /tmp/dr13.cnrs.fr.* /etc/shibboleth/ssl/

Version du 7 mai 2009 à 09:25

Installation Shibboleth

Debian

apt-get install build-essential libssl0.9.8 libssl-dev libcurl3 libcurl3-dev apache2-threaded-dev 


  • log4shib:
wget http://shibboleth.internet2.edu/downloads/log4shib/1.0/log4shib-1.0.tar.gz
tar xvzf log4shib-1.0.tar.gz
./configure --disable-static --disable-doxygen --prefix=/opt/shibboleth-sp
make && make install
   

  • Xerces-C: cd xerces-c-src_2_8_0
wget http://archive.apache.org/dist/xml/xerces-c/sources/xerces-c-src_2_8_0.tar.gz
tar xvzf xerces-c-src_2_7_0.tar.gz
cd xerces-c-src_2_8_0
export XERCESCROOT=`pwd`
cd src/xercesc
./runConfigure -p linux -r pthread -P /opt/shibboleth-sp
make && make install  

  • XML-Security-C:
wget http://xml.apache.org/security/dist/c-library/xml-security-c-1.4.0.tar.gz
tar xvzf xml-security-c-1.4.0.tar.gz
cd xml-security-c-1.4.0
./configure --without-xalan --prefix=/opt/shibboleth-sp
make && make install

  
  • XMLTooling-C:
wget http://shibboleth.internet2.edu/downloads/opensaml/cpp/latest/
tar xvzf xmltooling-1.1.tar.gz
cd xmltooling-1.1
./configure --with-log4shib=/opt/shibboleth-sp --prefix=/opt/shibboleth-sp -C


  • OpenSAML-C:
wget http://shibboleth.internet2.edu/downloads/opensaml/cpp/latest/opensaml-2.1.tar.gz
tar xvzf opensaml-2.1.tar.gz
./configure --with-log4shib=/opt/shibboleth-sp --prefix=/opt/shibboleth-sp -C
make && make install


  • Shibboleth:
wget http://shibboleth.internet2.edu/downloads/shibboleth/cppsp/latest/shibboleth-sp-2.1.tar.gz
tar xvzf shibboleth-sp-2.1.tar.gz
cd shibboleth-2.1
./configure --with-log4shib=/opt/shibboleth-sp 
make && make install


Red Hat

Certificats

openssl genrsa 1024 > /tmp/dr13.cnrs.fr.key 
openssl req -new -x509 -nodes -sha1 -days 7300 -subj "/C=FR/O=CNRS/CN=dr13.cnrs.fr" -key /tmp/dr13.cnrs.fr.key  >/tmp/dr13.cnrs.fr.crt
openssl x509 -noout -fingerprint -text < /tmp/dr13.cnrs.fr.crt >> /tmp/dr13.cnrs.fr.crt
mv /tmp/dr13.cnrs.fr.* /etc/shibboleth/ssl/