*** empty log message ***

[shibboleth/sp.git] / doc / InQueue.html

diff --git a/doc/InQueue.html b/doc/InQueue.html
index 84984f9..4720ec5 100644 (file)
--- a/doc/InQueue.html
+++ b/doc/InQueue.html
@@ -182,15 +182,23 @@
                        their organization.  Internet2 reserves the right to make final
                        decisions about participation in the Federation.</p>
 
-                       <p>Participation in the Federation is limited to the period during which
-                       an organization is learning about Shibboleth and federated operations.  Upon
-                       completion of this period, the organization is expected to join a
-                       Federation (or some other management solution) that meets its long-term
-                       operational needs.
-                       </p>
-                       <p>By joining InQueue, an organization agrees that the Federation can list their name on the Federation web site as a member of the Federation.</p>
+                       <p>InQueue is intended to serve as a primary federation
+                       for an organization only during the period an
+                       organization is learning about Shibboleth and federated
+                       operations.  Upon completion of this period, the
+                       organization is expected to join a Federation (or some
+                       other management solution) that meets its long-term
+                       operational needs. </p>
+
+                       <p>By joining InQueue, an organization agrees that the
+                       Federation can list their name on the Federation web
+                       site as a member of the Federation.</p>
                        
-                       <p>In joining InQueue, an organization will make a good faith effort to maintain a web page describing their use of Shibboleth. This page will be linked from the Federation member list.</p>
+                       <p>In joining InQueue, an organization will make a good
+                       faith effort to maintain a web page describing their use
+                       of Shibboleth. This page will be linked from the
+                       Federation member list.</p>
+
                        </blockquote>
 
                        <h4>2.2  Data management</h4>
@@ -221,6 +229,18 @@
                                                HEPKI Test CA</a></li>
                                        <li><a href="http://www.cren.net/crenca/">CREN CA</a></li>
                                </ul>
+                               
+                               <p>For origins, OpenSSL must also be configured to use the
+                               appropriate set of trusted roots for the issuance of SSL
+                               certificates that Shibboleth trusts.  For InQueue, this list may
+                               be obtained from <span
+                               class="fixedwidth">http://wayf.internet2.edu/InQueue/ca-bundle.
+                               crt</span>.  This list should then be copied for <span
+                               class="fixedwidth">mod_ssl</span>, which will typically need to
+                               be to <span
+                               class="fixedwidth">/conf/ssl.crt/ca-bundle.crt</span>.  This
+                               list of CA's is <b>not</b> rigorous nor secure and may contain
+                               CA's which have no level of assurance or are questionable.</p>
                        </blockquote>
 
                        <h4>2.4  Attributes</h4>
@@ -292,8 +312,8 @@
 
                        <h4>3.  Joining InQueue</h4>
 
-                       <blockquote><p>To join InQueue, origins <a href="mailto:shib-support@internet2.edu?subject=Shib%20Origin%20Site%%0D%20%2020Application"> submit a request to
-                                       shib-support@internet2.edu</a> containing the following
+                       <blockquote><p>To join InQueue, origins <a href="mailto:inqueue-support@internet2.edu?subject=Shib%20Origin%20Site%%0D%20%2020Application"> submit a request to
+                                       inqueue-support@internet2.edu</a> containing the following
                                information:</p></blockquote>
 
                        <blockquote>
@@ -318,8 +338,8 @@
                                        <li>(optional) Briefly describe the organization's planned uses of Shibboleth.
                        </ul></blockquote>
 
-                       <blockquote><p>To join InQueue, targets must <a href="mailto:shib-support@internet2.edu?subject=Shib%20Target%20Site%%0D%20%2020Application"> submit a basic application to
-                                       shib-support@internet2.edu</a> containing the following
+                       <blockquote><p>To join InQueue, targets must <a href="mailto:inqueue-support@internet2.edu?subject=Shib%20Target%20Site%%0D%20%2020Application"> submit a basic application to
+                                       inqueue-support@internet2.edu</a> containing the following
                                information:</p></blockquote>
 
                        <blockquote>