Mailing-List: contact users-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cxf.apache.org
Received-SPF: softfail (athena.apache.org: transitioning domain of
 joel.tazzari@gmail.com does not designate 216.139.236.26 as permitted sender)
Date: Tue, 26 Nov 2013 04:06:14 -0800 (PST)
From: tazouxme <joel.tazzari@gmail.com>
To: users@cxf.apache.org
Message-ID: <1385467573859-5737010.post@n5.nabble.com>
Subject: Question about CXF Fediz 1.1.0 and certificates
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Hi all,

Congrats for the job, this is a very nice feature, very useful !
I have some questions about certificates. There are a lot of certificates
used in Fediz, and I do not understand how it works. This is problematic
because I would like to generate and use my own REALM-name.

Could you please explain me those certificates and, if possible, how they
are generated?

- idp-ssl-server.jks
- rp-ssl-server.jks
- ststrust.jks

No problem about stsrealm_a.jks and stsrealm_b.jks.

One last question : I would use Fediz in my system. Is it possible to use
only one REALM-name (that is to say only one IdP)? 
And furthmore, as there would be only one IdP available, is it possible to
avoid the step of chosing an IdP before logging?

Thanks a lot for your explanation :)
Regards,
Joel


--
View this message in context: http://cxf.547215.n5.nabble.com/Question-about-CXF-Fediz-1-1-0-and-certificates-tp5737010.html
Sent from the cxf-user mailing list archive at Nabble.com.