Skip to content

Commit 6fae35f

Browse files
committed
Merge pull request #21 from Unicon/3.2.1
Update README.md
2 parents 5f1cbac + dca4527 commit 6fae35f

1 file changed

Lines changed: 5 additions & 24 deletions

File tree

README.md

Lines changed: 5 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -4,12 +4,10 @@
44
Docker Hub images have not yet been updated, but will be soon. Instructions for switching to Oracle Java for local use will be added shortly. See issue-#19 for details and comments.
55

66
## Overview
7-
This Docker image contains a deployed Shibboleth IdP 3.2.1 running on Java Runtime 1.8 update 71 and Jetty 9.3.7 running on the latest CentOS 7 base. This image is a base image and should be used to set the configuration with local changes.
7+
This Docker image contains a deployed Shibboleth IdP 3.2.1 running on OpenJDK-based Zulu 8 Update 72 and Jetty 9.3.7 running on the latest CentOS 7 base. This image is a base image and should be used to set the configuration with local changes.
88

99
Every component (Java, Jetty, Shibboleth IdP, and extensions) in this image is verified using cryptographic hashes obtained from each vendor and stored in the Dockerfile directly. This makes the build essentially deterministic.
1010

11-
> Use of this image requires acceptance of the *Oracle Binary Code License Agreement for the Java SE Platform Products* (<http://www.oracle.com/technetwork/java/javase/terms/license/index.html>).
12-
1311
## Tags
1412
Currently maintained tags:
1513

@@ -158,39 +156,22 @@ Jetty Logs and Shibboleth IdP's `idp-process.log`are redirected to the console a
158156

159157
Removing the `/opt/shib-jetty-base/etc/jetty-logging.xml` (or setting it to your own configuration) will cause Jetty's default behavior to occur. Restoring the IdP's baseline `logback.xml` via overlaying will cause the default IdP file logging behavior to occur.
160158

161-
## Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files
162-
Due to export concerns the Shibboleth IdP image does not ship with the Unlimited Strength JCE files. To add them to your image, add the following RUN command as a step in your `Dockerfile`.
163-
164-
```
165-
RUN yum -y install unzip \
166-
&& wget --no-check-certificate --no-cookies --header "Cookie: oraclelicense=accept-securebackup-cookie" \
167-
http://download.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip \
168-
&& echo "f3020a3922efd6626c2fff45695d527f34a8020e938a49292561f18ad1320b59 jce_policy-8.zip" | sha256sum -c - \
169-
&& unzip -oj jce_policy-8.zip UnlimitedJCEPolicyJDK8/local_policy.jar -d /opt/jre-home/jre/lib/security/ \
170-
&& unzip -oj jce_policy-8.zip UnlimitedJCEPolicyJDK8/US_export_policy.jar -d /opt/jre-home/jre/lib/security/ \
171-
&& rm jce_policy-8.zip \
172-
&& chmod -R 640 /opt/jre-home/jre/lib/security/ \
173-
&& chown -R root:jetty /opt/jre-home/jre/lib/security/
174-
```
175-
176-
> Use of this image requires acceptance of the *Oracle Binary Code License Agreement for the Java SE Platform Products* (<http://www.oracle.com/technetwork/java/javase/terms/license/index.html>).
177-
178-
## HTTP2 Support
179-
HTTP2 support is currently experimental. You can enable it by following the directions found at https://github.com/UniconLabs/dockerized-idp-testbed#http2-support.
180-
181159
## Building from source:
182160

183161
```
184162
$ docker build --tag="<org_id>/shibboleth-idp" github.com/unicon/shibboleth-idp-dockerized
185163
```
186164

165+
## Recipes
166+
Instructions for things like use the Oracle JVM and JCE with this image can be found at <https://github.com/Unicon/shibboleth-idp-dockerized/wiki/>.
167+
187168
## Authors/Contributors
188169

189170
* John Gasper (<jgasper@unicon.net>)
190171

191172
## LICENSE
192173

193-
Copyright 2015 Unicon, Inc.
174+
Copyright 2016 Unicon, Inc.
194175

195176
Licensed under the Apache License, Version 2.0 (the "License");
196177
you may not use this file except in compliance with the License.

0 commit comments

Comments
 (0)