Versionen im Vergleich

Schlüssel

  • Diese Zeile wurde hinzugefügt.
  • Diese Zeile wurde entfernt.
  • Formatierung wurde geändert.

Local additions to the official upgrade instructions from the Shibboleth wiki, to be re-visited for each upgrade of the IDP software.

Warnung
titleUpdate/upgrade instructions for IDP version 3.x only!

If you're still running the old Shibboleth IDP version 2.x you can follow another guide to build a completely new IDP, on a current and supported OS and then later migrate settings from IDPv2 over as needed.

Updating from IDP 3.3.0 or older

Seems from version 3.3.0 on the IDP also needs the JSP API 2.3 , which can be found in the libservlet3.1-java package, if you don't have that installed already:

Kein Format
apt install --no-install-recommends libservlet3.1-java

...

Install new IDP 4.x software over the existing IDP

...

4.x installation

Download and unpack the latest Shibboleth IDP software, adjusting the value of $VER to the latest/current version. Optional (but recommended, if you understand how PGP and the Web of Trust work) commands for verification of the software using cryptographic signatures from the Shibboleth devlopers are included below.

...

Next start the upgrade:

Kein Format
export VER=34.0.40.6
cd /usr/local/src
curl -s https://shibboleth.net/downloads/PGP_KEYS | gpg --import -
curl -O "https://shibboleth.net/downloads/identity-provider/latest/shibboleth-identity-provider-$VER.tar.gz{,.asc}"
gpg --verify shibboleth-identity-provider-$VER.tar.gz.asc
tar xzf shibboleth-identity-provider-$VER.tar.gz
cd shibboleth-identity-provider-$VER
./bin/install.sh < /dev/null

...

Kein Format
Source (Distribution) Directory (press <enter> to accept default: [/usr/local/src/shibboleth-identity-provider-34.30.10]
Installation Directory: [/opt/shibboleth-idp]
Rebuilding /opt/shibboleth-idp/war/idp.war ...
...done
BUILD SUCCESSFUL
Total time: 4 seconds

...