Seitenhistorie
Local additions to the official upgrade instructions from the Shibboleth wiki, to be re-visited for each upgrade of the IDP software.
Warnung | ||
---|---|---|
| ||
If you're still running the old Shibboleth IDP version 2.x you can follow another guide to build a completely new IDP, on a current and supported OS and then later migrate settings from IDPv2 over as needed. |
Updating from IDP 3.3.0 or older
Seems from version 3.3.0 on the IDP also needs the JSP API 2.3 , which can be found in the libservlet3.1-java
package, if you don't have that installed already:
Kein Format |
---|
apt install --no-install-recommends libservlet3.1-java |
...
Install new IDP 4.x software over the existing IDP
...
4.x installation
Download and unpack the latest Shibboleth IDP software, adjusting the value of $VER
to the latest/current version. Optional (but recommended, if you understand how PGP and the Web of Trust work) commands for verification of the software using cryptographic signatures from the Shibboleth devlopers are included below.
...
Next start the upgrade:
Kein Format |
---|
export VER=34.0.40.6 cd /usr/local/src curl -s https://shibboleth.net/downloads/PGP_KEYS | gpg --import - curl -O "https://shibboleth.net/downloads/identity-provider/latest/shibboleth-identity-provider-$VER.tar.gz{,.asc}" gpg --verify shibboleth-identity-provider-$VER.tar.gz.asc tar xzf shibboleth-identity-provider-$VER.tar.gz cd shibboleth-identity-provider-$VER ./bin/install.sh < /dev/null |
...
Kein Format |
---|
Source (Distribution) Directory (press <enter> to accept default: [/usr/local/src/shibboleth-identity-provider-34.30.10] Installation Directory: [/opt/shibboleth-idp] Rebuilding /opt/shibboleth-idp/war/idp.war ... ...done BUILD SUCCESSFUL Total time: 4 seconds |
...