The last time I created a certificate for SAML2 se...
# adobeh
hemi345
12/10/2024, 6:40 PMThe last time I created a certificate for SAML2 service provider, I used Coldfusion's "Generate SP" button in Administrator to create the SP and certificate and then use the browser dev tools to see what the password for the .p12 file was so that I could use OpenSSL to create a certificate for the service provider on the federation side. The cert is expiring soon so I was trying to create a new cert but it appears I can no longer see the password using dev tools so I'm unable to create the cert file. So I figured I'd create a cert using OpenSSL. When I look at the current/expiring .p12 file using Keystore Explorer, I see an extended key usage section but Keystore Explorer also displays an error before showing me that it's using OID 2.5.29.37 so I'm not sure if there's more that goes along with that. Has anyone successfully created certificate for Coldfusion's SAML2 service provider using OpenSSL?
hemi345
12/12/2024, 3:24 PMNot sure if the extended key usage was needed, but I added it using an openssl config file with the information in there and then the -extensions attribute pointing to a section in the config file. Also the keystore alias in the SP configuration (defaults to "signing") is the "Entry Name" in the cert, I updated the SP config to "1" as that's what OpenSSL defaults the entry name to. Once our federation info was updated, the cert worked fine. 🙂