[upki-fed:00944] メタデータ取得時のサーバ証明書検証に関する問題について

[国立情報学研究所 学認事務局 野田 <xxxxxxxxxxxxxx@xxxxxxxxx>]

$B3XG'>pJs8r49(BML$B!!;22CpJs3X8&5f=j!!3XG';vL36I$NLnED$G$9!#(B
$BJ?AG$h$j3XG'$N1?1D$K$46(NO$r;r$j!$$"$j$,$H$&$4$6$$$^$9!#(B

 $B3XG'$GDs6!$7$F$$$k5;=Q%,%$%I$G$O%U%'%G%l!<%7%g%s%a%?%G!<%?$r<+F0ZL@=q$N8!>Z$,9T$o$l$J$$$3$H$,3N(B
$BG'$5$l$^$7$?!#(B(*)
$B3F4IM}e!$E,@Z$JBP=h$r9T$C$F$$$?$@$-(B
$B$^$9$h$&$*4j$$$$$?$7$^$9!#(B
# $BK\%"%J%&%s%9$O!$(B2015$BG/(B4$B7n(B8$BF|IU$G3XG';22C(BIdP / SP$B4IM}e$2$^$9!#!W(B


1. $B1F6A$r8!>Z$r9T$o$:DI2C$N(BIdP$B%a%?%G!<%?$rFI$_9~$s$G$$$k>l(B
$B9g!$Ev3:(BSP$B$OCf4V$C$F$$$l$P%@%&%s%m!<%I8e$N%a%?%G!<%?(B
$B$KBP$7$F%a%?%G!<%?<+BN$K;\$5$l$?=pL>8!>Z$,9T$o$l$k$?$a1F6A$rl9g!J%a%?%G!<%?$N=pL>8!>Z$r9T$C$F$$$J(B
   $B$$>l9g!K(B

  $B!J>ZL@=q8!>Z$,9T$o$l$J$$@_Dj$NNc!K(B
  <MetadataProvider type="XML" uri="https://example.com/metadata.xml"
    backingFilePath="backing-metadata.xml" reloadInterval="7200">
  </MetadataProvider>


$BA[Dj$5$l$k%1!<%9$H$7$F$O!$l9g$G!$$+$D%a%?%G!<%?$X$N=pL>$*$h$S(BSP$BB&$G%a%?%G!<%?$N8!>Z$r9T$C$F$$(B
$B$J$$>l9g$,9M$($i$l$^$9!#(B

 $B!&3XFb$G%m!<%+%k$N%U%'%G%l!<%7%g%s$r9=C[$7$F$$$k>l9g(B
 $B!&(BSP$B$KD>@\FI$_9~$^$;$k$?$a$K(BIdP$BB&$G%a%?%G!<%?$r8x3+$7$F$$$k>l9g(B


2. $BBP=hJ}K!(B

$BZL@=q8!>Z$rM-8z$K$7$F$/$@$5$$!#(B

  $B!J>ZL@=q8!>Z$r9T$&@_Dj$NNc!K(B
  <MetadataProvider type="XML" uri="https://example.com/metadata.xml"
    backingFilePath="backing-metadata.xml" reloadInterval="7200">

    <TransportOption provider="CURL" option="64">1</TransportOption>
    <TransportOption provider="CURL" option="81">2</TransportOption>
    <TransportOption provider="CURL"
option="10065">/etc/pki/tls/certs/ca-bundle.crt</TransportOption>
  </MetadataProvider>

  $B"((B 3$B9TL\$N(Bca-bundle.crt$B$O(BCentOS 5/6$B$N>l9g$N%Q%9$H$J$j$^$9!#(BOS$B$d%G%#%9(B
     $B%H%j%S%e!<%7%g%s$4$H$K0[$J$k>l9g$,$"$j$^$9$N$GE,59=$@5$7$F$/$@$5$$!#(B

$BB>$NBP=hJ}K!$H$7$F$O!$%j%b!<%H$+$iD>@\ZL@=q8!>Z5!G=$rMxMQ$7$F%@%&%s%m!<%I$9$kEy!K$G%a%?(B
$B%G!<%?$rhttps://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPReloadableXMLFile




-- 
=========================================================
$B!!9qN)>pJs3X8&5f=j(B $B3X=Q4pHW2](B $B3XG';vL36I!!!JC4Ev!'LnED!K(B
$B!!(BTEL$B!'(B03-4212-2218$B!!(xxxxxxxxxxxxxxx@xxxxxxxxx
$B!!3XG'(BWeb$B%Z!<%8(B  https://www.gakunin.jp/
$B!!?=@A%7%9%F%`(B   https://office.gakunin.nii.ac.jp/
=========================================================