search

latchset / mod_auth_mellon

An Apache module with a simple SAML 2.0 service provider
Other
114 stars 49 forks source link

mellon_create_metadata.sh fails on OpenSSL 3 #105

Closed kvisle closed 2 years ago

kvisle commented 2 years ago

Running the helper-script with openssl 3 fails silently, and the xml-file is missing.

[root@acme ~]# ./mellon_create_metadata.sh https://api.acme:5000 https://api.acme:5000/v3/OS-FEDERATION/identity_providers/keycloak-acme/protocols/saml2/auth/mellon

Output files:
Private key:               https_api.acme_5000.key
Certificate:               https_api.acme_5000.cert
Metadata:                  https_api.acme_5000.xml

Host:                      api.acme

Endpoints:
SingleLogoutService:       https://api.acme:5000/v3/OS-FEDERATION/identity_providers/keycloak-acme/protocols/saml2/auth/mellon/logout
AssertionConsumerService:  https://api.acme:5000/v3/OS-FEDERATION/identity_providers/keycloak-acme/protocols/saml2/auth/mellon/postResponse

The only generated files are:

-rw-------.  1 root root 1371 Aug  4 09:31 https_api.acme_5000.cert
-rw-------.  1 root root 2484 Aug  4 09:31 https_api.acme_5000.key

(xml-file missing)

This is tested on Alma Linux 9, with OpenSSL 3.0.1