Skip to content
Snippets Groups Projects
Commit 50d12226 authored by Olav Morken's avatar Olav Morken
Browse files

docs: Update IdP certificate generation in Google Apps tutorial.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2835 44740490-163a-0410-bde0-09ae8108e29a
parent 665c364c
No related branches found
No related tags found
No related merge requests found
...@@ -43,14 +43,11 @@ Edit `config.php`, and enable the SAML 2.0 IdP: ...@@ -43,14 +43,11 @@ Edit `config.php`, and enable the SAML 2.0 IdP:
For test purposes, you can skip this section, and use the certificate included in the simpleSAMLphp distribution. For a production system, you MUST generate a new certificate for your IdP. For test purposes, you can skip this section, and use the certificate included in the simpleSAMLphp distribution. For a production system, you MUST generate a new certificate for your IdP.
Here is an example of openssl commands to generate a new key and a self signed certificate to use for signing SAML messages: Here is an example of an openssl command to generate a new key and a self signed certificate to use for signing SAML messages:
openssl genrsa -des3 -out googleappsidp.key 2048 openssl req -newkey rsa:2048 -new -x509 -days 3652 -nodes -out googleappsidp.crt -keyout googleappsidp.pem
openssl rsa -in googleappsidp.key -out googleappsidp.pem
openssl req -new -key googleappsidp.key -out googleappsidp.csr
openssl x509 -req -days 9999 -in googleappsidp.csr -signkey googleappsidp.key -out googleappsidp.crt
The certificate above will be valid for 9999 days (27 years). The certificate above will be valid for 10 years.
Here is an example of typical user input when creating a certificate request: Here is an example of typical user input when creating a certificate request:
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment