Profile broken due to missing IdP cert about openconext-deploy HOT 6 CLOSED

Indeed in groupvars/<yourenv>.yml you need to set the contents of Engine's IdP certificate in the var engine_profile_idp_certificate manually. This is a bit inconvenient to do automatically because the format is different than what is used in EB's own config (filename vs cert contents).

The change in OpenConext/Stepup-saml-bundle#47 makes it possible to specifiy filenames there; once Profile also supports that we can fix this more cleanly.

from openconext-deploy.

OpenConext/OpenConext-profile#62

from openconext-deploy.

Fixed in 458511d: if we can find EB's certificate in /etc/engineblock/engineblock.crt then it will now just work. Should a need arise to make this file location more configurable we can fix that in ansible.

from openconext-deploy.

For now, this look like a nice fix, thanks!
But doet it really make sense for Profile to directly read Engineblock's configuration? The two are seperate application now, aren't they?

from openconext-deploy.

This is just a (sane?) default. You can specify every file you want in the group_vars.

from openconext-deploy.

Ah, this was addressed in 458511d commit message. Never mind then ;)

from openconext-deploy.