src/STS/STS.csproj

@@ -6,7 +6,7 @@
 		<GenerateDocumentationFile>true</GenerateDocumentationFile>
 		<TargetFramework>net6.0</TargetFramework>
 		<GenerateAssemblyInfo>false</GenerateAssemblyInfo>
-		<Version>4.0.5</Version>
+		<Version>4.0.6</Version>
 	</PropertyGroup>
 	<PropertyGroup>
 		<Authors>RWTH Aachen University</Authors>

src/STS/Startup.cs

@@ -26,11 +26,11 @@ namespace Coscine.Api.STS
         /// so that the IdentityProviders and other entries can be accessed.
         /// </summary>
         public static Saml2Options CurrentSaml2Options;
+
         private ApplicationInformation _applicationInformation;
 
         public Startup()
         {
-
         }
 
         public override void SetBasePath(ApplicationInformation applicationInformation)
@@ -39,7 +39,6 @@ namespace Coscine.Api.STS
             _applicationInformation = applicationInformation;
         }
 
-
         public override void ConfigureServicesExtensionLate(IServiceCollection services)
         {
             base.ConfigureServicesExtensionLate(services);
@@ -106,9 +105,14 @@ namespace Coscine.Api.STS
                     var pfx = Program.Configuration.GetAndWait("coscine/global/sts/pfx");
                     var passwordString = Program.Configuration.GetStringAndWait("coscine/global/sts/pfxpassword");
 
+                    var pfxFuture = Program.Configuration.GetAndWait("coscine/global/sts/pfxFuture");
+                    var passwordStringFuture = Program.Configuration.GetStringAndWait("coscine/global/sts/pfxpasswordFuture");
+
                     var x509Certificate2 = new X509Certificate2(pfx, passwordString);
+                    var x509CertificateFuture = new X509Certificate2(pfxFuture, passwordStringFuture);
 
                     options.SPOptions.ServiceCertificates.Add(x509Certificate2);
+                    options.SPOptions.ServiceCertificates.Add(new ServiceCertificate() { Certificate = x509CertificateFuture, Status = CertificateStatus.Future, Use = CertificateUse.Both });
                     options.SPOptions.WantAssertionsSigned = true;
 
                     // For dealing with `'DeclarationReference' must be an absolute Uri``