Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Wiki Markup
    Create a new self-signed signing certificate set to expire on December 18, 2037: \[*DONE*\]
  2. Wiki Markup
    On December 18, 2013, deploy three new [metadata aggregates|InCFederation:Metadata Aggregates]: \[*DONE*\]
    1. A new production metadata aggregate that uses the new self-signed certificate and a SHA-2 digest algorithm (specifically, SHA-256):
    2. A new fallback metadata aggregate that uses the new self-signed certificate and the SHA-1 digest algorithm (like we do now):
    3. A new preview metadata aggregate that is aliased to the production metadata aggregate:
  3. Wiki Markup
    Advise all deployments to migrate to one of the new metadata aggregates ASAP but *no later than March 29, 2014*. \[*DONE*\]
  4. Wiki Markup
    Create discussion list [metadata-support@incommon.org|https://lists.incommon.org/sympa/info/metadata-support]. \[*DONE*\]
  5. Wiki Markup
    Replace the current metadata aggregate with a redirect to the _fallback metadata aggregate_ on March 29, 2014. \[*DONE*\]
  6. Retire the following resources on March 29, 2014:
    • Wiki Markup
      <span class="nolink">http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml</span> \[*DONE*\]
    • http://wayf.incommonfederation.org/InCommon/InCommon-metadata-test.xml
    • https://wayf.incommonfederation.org/bridge/certs/inc-md-cert.pem
    • https://wayf.incommonfederation.org/bridge/certs/incommon.pem
    • https://wayf.incommonfederation.org/bridge/certs/ca.pem
    • http://incommoncrl1.incommonfederation.org/crl/eecrls.crl
    • http://incommoncrl2.incommonfederation.org/crl/eecrls.crl
  7. Wiki Markup
    Sync the _fallback metadata aggregate_ with the _production metadata aggregate
    on June 30, 2014.
    _ on June&nbsp;30, 2014. \[*DONE*\]
  8. Wiki Markup
    Remove the redirect to the _fallback metadata aggregate_ on \[*date TBD*\].

...