| Both sides previous revision Previous revision | Next revisionBoth sides next revision |
| en:metadata [2019/07/24 11:11] – Wolfgang Pempe | en:metadata [2019/07/24 11:20] – Wolfgang Pempe |
|---|
| ==== DFN-PKI Generation 2 Certificate for Signature Validation (new) ==== | ==== DFN-PKI Generation 2 Certificate for Signature Validation (new) ==== |
| |
| <wrap important round>**Important** | <callout type="primary" title"Important Notes"> |
| | * These URLs are case-sensitive, i.e. lower case is important! |
| These links are case-sensitive! HTTPS is supported. | * HTTPS is supported. |
| | * Please refer to [[en:production#metadataprovider|this page]] for configuration examples for Shibboleth IdP und SP. |
| </wrap> | </callout> |
| |
| The signed metadata of the **DFN-AAI Test Federation:** \\ | The signed metadata of the **DFN-AAI Test Federation:** \\ |
| [[https://www.aai.dfn.de/fileadmin/metadata/dfn-aai.g2.pem|https://www.aai.dfn.de/fileadmin/metadata/dfn-aai.g2.pem]] | [[https://www.aai.dfn.de/fileadmin/metadata/dfn-aai.g2.pem|https://www.aai.dfn.de/fileadmin/metadata/dfn-aai.g2.pem]] |
| |
| <wrap important round>**Important** | |
| |
| Please refer to [[de:production#metadataprovider|this page]] for configuration examples for Shibboleth IdP und SP. | |
| |
| </wrap> | |
| |
| ==== DFN-PKI Generation 1 Certificate for Signature Validation (old) ==== | |
| <callout type="danger" title="Warning"> | |
| **The end of life of DFN-PKI Generation 1 [[https://blog.pki.dfn.de/2018/12/ablauf-der-alten-generation-1-der-dfn-pki-global/|is scheduled for 2019-07-09!]] \\ | |
| Only use Generation 2 metadata URLs! (see above)** | |
| </callout> | |
| <del>The signed metadata of the **DFN-AAI Test Federation:** \\ | |
| [[http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-Test-metadata.xml|http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-Test-metadata.xml]] | |
| |
| The signed metadata of the **DFN-AAI Basic Federation:** (file comprises all DFN-AAI production IdPs)\\ | |
| [[http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-Basic-metadata.xml|http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-Basic-metadata.xml]] | |
| |
| The signed metadata of the **DFN-AAI Advanced Federation:** \\ | |
| [[http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-metadata.xml|http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-metadata.xml]] | |
| |
| Signed metadata file with all production **Service Providers in DFN-AAI (for IdPs):** \\ | |
| [[http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-sp-metadata.xml|http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-sp-metadata.xml]] | |
| |
| The signed metadata for participation of **IdPs in [[:de:edugain|eduGAIN]]** (file comprises all SPs available via eduGAIN):\\ | |
| [[http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-eduGAIN+sp-metadata.xml|http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-eduGAIN+sp-metadata.xml]] | |
| |
| The signed metadata for participation of **SPs in [[:de:edugain|eduGAIN]]** (file comprises all IdPs available via eduGAIN):\\ | |
| [[http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-eduGAIN+idp-metadata.xml|http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-eduGAIN+idp-metadata.xml]] | |
| |
| **Local metadata:** [[http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-Local-999-metadata.xml|http://www.aai.dfn.de/fileadmin/metadata/DFN-AAI-Local-999-metadata.xml]] ("999" has to be replaced with an organization-specific number. Please refer to [[:de:metadata_local|Lokale Metadaten]]) | |
| |
| The **DFN-AAI certificate** (PEM format) for validating the signature(s) of DFN-AAI metadata (SHA256 fingerprint: D3:3E:0F:3C:C9:43:1F:A0:0C:14:97:86:30:E3:5F:72:39:56:2C:98:85:69:2D:52:63:1C:86:78:35:90:4F:5C):\\ | |
| [[https://www.aai.dfn.de/fileadmin/metadata/dfn-aai.pem|https://www.aai.dfn.de/fileadmin/metadata/dfn-aai.pem]]\\ | |
| fingerprint after March 20, 2017: 7B:44:E1:64:B4:6C:46:7D:82:07:BC:C1:BB:30:B8:64:11:2B:D2:73:09:47:32:CC:B2:20:2E:4A:33:5C:92:64 | |
| </del> | |
| ==== Additional Information ==== | ==== Additional Information ==== |
| |