[Building Sakai] QWuick question about basic lti

[Matthew Jones]

More specifically, it uses a hex encoded blowfish cipher encrypted on the
secretKey which is auto generated when the server comes up in the
sakai.home/sakai.rutgers.linktool.privkey file.

However the questions was asked and never answered about why this was still
used. I think the question about sending a (separate) session id encrypted
with the key that is exchanged makes sense to me.
http://old.nabble.com/-Building-Sakai--basic-lti-and-sakai-session-id-tt32511936.html#a32511936

For linktool, you had to use the SakaiSigning.jws webservice to get the
real session id. Which really isn't always convenient, unless you control
the end point.
https://source.sakaiproject.org/svn/linktool/trunk/linktool.txt
https://confluence.sakaiproject.org/display/CONF06/Linking+External+Tools+with+Sakai


On Thu, Feb 14, 2013 at 4:47 PM, Sam Ottenhoff <ottenhoff at longsight.com>wrote:

>
>
>
> On Thu, Feb 14, 2013 at 4:34 PM, George Pipkin <gpp8p at virginia.edu> wrote:
>
>>  1) How do I decrypt the session id from ext_sakai_session ?
>>
>
>
> $ grep -B4 -r sakai_session *
>
> basiclti-common/src/java/org/sakaiproject/basiclti/util/SakaiBLTIUtil.java-
>             if (s != null) {
> basiclti-common/src/java/org/sakaiproject/basiclti/util/SakaiBLTIUtil.java-
>                     String sessionid = s.getId();
> basiclti-common/src/java/org/sakaiproject/basiclti/util/SakaiBLTIUtil.java-
>                     if (sessionid != null) {
> basiclti-common/src/java/org/sakaiproject/basiclti/util/SakaiBLTIUtil.java-
>                             sessionid = LinkToolUtil.encrypt(sessionid);
> basiclti-common/src/java/org/sakaiproject/basiclti/util/SakaiBLTIUtil.java:
>
> setProperty(props,"ext_sakai_session",sessionid);
>
>
>
>>
>> 2) How can I tell the absolute name of the server I launched from in a
>> load-balanced setting ?
>>
>>
> ext_sakai_serverid
>
>
> --Sam
>
> _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>
> TO UNSUBSCRIBE: send email to
> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
> "unsubscribe"
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20130214/9de3b55f/attachment.html