EngineBlock 4.2.9

OpenConext EngineBlock v4.2.9 Release Notes

Bugfix release:
Improve dumping attachments to syslog #71.

EngineBlock 4.3.0

OpenConext EngineBlock v4.3.0 Release Notes

Full support for SP Proxies and improvements to error handling.

SP Proxies are Service Providers that:

• Have 'coin:trusted_proxy' set
• Sign their AuthnRequests
• Mention another Service Provider, also known to EB, in the AuthnRequest > Scoping > RequesterId.

For these proxies EB will act like a big brother and do consent, attribute release, WAYF and attribute manipulation
for them. Most notable implementation is the upcoming SURFconext Step Up Gateway.

List of issues resolved:

• EB > 4 accepts SAML Responses over HTTP Redirect #83
• Remove Management of 3rd party OpenSocial Group Providers from Profile #81
• WAYF screen not valid HTML #79
• Consistently apply licensing file header #76
• Remove Internal endpoint #74
• Full support for SP Proxies #64
• Show more informative error when IdP denies user access #61
• Add specific error message for IdP cert mismatch #55
• Improve error message for invalid IdP signing certificate #25

See: https://github.com/OpenConext/OpenConext-engineblock/issues?q=milestone%3A4.3.0+is%3Aclosed

Also https://github.com/OpenConext/OpenConext-engine-test-stand can be used for functional tests.

And the following dependencies were updated:

|package                     | prev version  | current version |
|----------------------------|---------------|-----------------|
|kriswallsmith/assetic       | dev-master    | v1.2.0          |
|simplesamlphp/saml2         | v0.4.2        | v0.5.0          |
|simplesamlphp/simplesamlphp | v1.12.0       | v1.13.0         |
|phake/phake                 | v2.0.0-alpha2 | v2.0.0-beta2    |
|phpunit/phpunit             | v3.7.19       | v4.3.4          |

EngineBlock 4.2.8

OpenConext EngineBlock v4.2.8 Release Notes

Load Balancer support and logging improvements.

• Ability to set SSP baseurlpath to specific value #89
• Message Parser removes messages #87
• X-Forwarded-For header instead of REMOTE_ADDR as IP address source #84

See: https://github.com/OpenConext/OpenConext-engineblock/issues?q=milestone%3A4.2.8+is%3Aclosed

EngineBlock 4.1.7

SURFnet SURFconext EngineBlock v4.1.7 Release Notes

Logging improvements

See milestone 4.1.7 on GitHub.

EngineBlock 4.2.7

OpenConext EngineBlock v4.2.7 Release Notes

Bugfix release.

• Fixed SSP (used by Profile) including for certificate.
• Improve default for ldap.userName
• Release Note Refactoring
• Deprecated unused .travis.yml

EngineBlock 4.2.6

SURFnet SURFconext EngineBlock v4.2.6 Release Notes

Better logging defaults and removal of deprecated functionality.

Changed configuration settings:

• logs.syslog-queue.writerParams.targetLog.syslog.writerParams.application defaults to "EBLOG"
• Added a Priority filter to queued syslog filter with priority 7

Removed:

• engine-internal along with
  • /cron/deprovision
  • /social/*
• Composer dependencies:
  • apache/shindig
  • behat/behat
  • behat/mink
  • behat/mink-extension
  • behat/mink-goutte-driver

Upgraded:

• Composer
• Assetic
• Pimple DI container (2.0 => 2.1.1)
• SimpleSAMLphp saml2 (0.4.1 => 0.4.2)
• Symfony/process (2.4.2 => 2.5.4)
• Zend Framework 1 (1.12.9 => 1.12.9)

EngineBlock 4.2.5

SURFnet SURFconext EngineBlock v4.2.5 Release Notes

Better configuration defaults

Changed configuration settings:

• ldap.useSsl default to false
• ldap.userName defaults to "cn=engineblock,dc=surfconext,dc=nl"
• Unset unused ldap.accountDomainName
• ldap.baseDn defaults to "dc=surfconext,dc=nl"
• email.sendWelcomeMail defaults to false
• auth.simplesamlphp.idp.certificate defaults to "/etc/openconext/engineblock.crt"

Added:

• Fixed adding the VO in an attribute

Removed:

• Inconsistently applied and unnecessary file licensing headers (Issue #76, PR #78)

EngineBlock 4.1.6

SURFnet SURFconext EngineBlock v4.1.6 Release Notes

Miscellaneous bugfix release.

• crashes hard when SP requests HTTP-Artifact binding
• WAYF: when no results found, pressing enter advances to the first IdP
• Revert fix for issue 58
• More verbose error reporting in logs
• better error when missing or wrong certificate in sp metadata
• Sending debug email fails with call to undefined method
• Fix english language string to add missing variable.
• AuthnRequests with ACSUrl but no ProtocolBinding
• Retrieving SP-specific metadata for a nonexisting SP results in a 500 error

See milestone 4.1.6 on GitHub.

EngineBlock 4.2.4

SURFnet SURFconext EngineBlock v4.2.4 Release Notes

Bugfix to /proxy/certificate.

• Fixed /proxy/certificate

EngineBlock 4.1.5

SURFnet SURFconext EngineBlock v4.1.5 Release Notes

Bugfix release for 'Transparent' (WAYFless) requests.

• issues/58: SP using transparent endpoint should get engine as issuer
• issues/57: In debug email, NameID shows as Array
• issues/54: profile needs htmlentities escaping bug