[java-shib-idp2 COMMIT] in /branches/REL_2: doc/RELEASE-NOTES.txt src/installer/resources/conf-tmpl/relying-party.xml...

[noreply at shibboleth.net]

Author: scantor
Date: Fri Mar  8 14:26:06 2013
New Revision: 3149

URL: http://svn.shibboleth.net/view/java-shib-idp2?rev=3149&view=rev
Log:
SIDP-575 - Add option to omit NotBefore from assertion conditions

Modified:
    branches/REL_2/doc/RELEASE-NOTES.txt
    branches/REL_2/src/installer/resources/conf-tmpl/relying-party.xml
    branches/REL_2/src/main/java/edu/internet2/middleware/shibboleth/idp/profile/saml1/AbstractSAML1ProfileHandler.java
    branches/REL_2/src/main/java/edu/internet2/middleware/shibboleth/idp/profile/saml2/AbstractSAML2ProfileHandler.java
    branches/REL_2/src/test/resources/data/conf1/relying-party.xml

Modified: branches/REL_2/doc/RELEASE-NOTES.txt
URL: http://svn.shibboleth.net/view/java-shib-idp2/branches/REL_2/doc/RELEASE-NOTES.txt?rev=3149&r1=3148&r2=3149&view=diff
==============================================================================
--- branches/REL_2/doc/RELEASE-NOTES.txt (original)
+++ branches/REL_2/doc/RELEASE-NOTES.txt Fri Mar  8 14:26:06 2013
@@ -9,9 +9,9 @@
 [SIDP-563] - IdP-only SAML logout profile handler
 [SIDP-564] - Happy Eyeballs support for IdP session cookie address checking
 [SIDP-567] - Login Context key entropy can be improved
-[SIDP=569] -  Make Organization elements via taglib available to login page
+[SIDP=569] - Make Organization elements via taglib available to login page
 [SIDP-570] - Customize ServiceName tag output for unknown SPs
-[SIDP-572] - Test on Red Hat's openjdk 1.7
+[SIDP-575] - Add option to omit NotBefore from assertion conditions 
 
 Changes in Release 2.3.8
 =============================================

Modified: branches/REL_2/src/installer/resources/conf-tmpl/relying-party.xml
URL: http://svn.shibboleth.net/view/java-shib-idp2/branches/REL_2/src/installer/resources/conf-tmpl/relying-party.xml?rev=3149&r1=3148&r2=3149&view=diff
==============================================================================
--- branches/REL_2/src/installer/resources/conf-tmpl/relying-party.xml (original)
+++ branches/REL_2/src/installer/resources/conf-tmpl/relying-party.xml Fri Mar  8 14:26:06 2013
@@ -31,10 +31,12 @@
             read the documentation).
         -->
         <rp:ProfileConfiguration xsi:type="saml:ShibbolethSSOProfile" includeAttributeStatement="false" 
-                                 assertionLifetime="PT5M" signResponses="conditional" signAssertions="never"/>
+                                 assertionLifetime="PT5M" signResponses="conditional" signAssertions="never"
+                                 includeConditionsNotBefore="true"/>
                               
         <rp:ProfileConfiguration xsi:type="saml:SAML1AttributeQueryProfile" assertionLifetime="PT5M" 
-                                 signResponses="conditional" signAssertions="never"/>
+                                 signResponses="conditional" signAssertions="never"
+                                 includeConditionsNotBefore="true"/>
         
         <rp:ProfileConfiguration xsi:type="saml:SAML1ArtifactResolutionProfile" signResponses="conditional" 
                                  signAssertions="never"/>
@@ -42,17 +44,20 @@
         <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile" includeAttributeStatement="true" 
                                  assertionLifetime="PT5M" assertionProxyCount="0" 
                                  signResponses="never" signAssertions="always" 
-                                 encryptAssertions="conditional" encryptNameIds="never"/>
+                                 encryptAssertions="conditional" encryptNameIds="never"
+                                 includeConditionsNotBefore="true"/>
 
         <rp:ProfileConfiguration xsi:type="saml:SAML2ECPProfile" includeAttributeStatement="true" 
                                  assertionLifetime="PT5M" assertionProxyCount="0" 
                                  signResponses="never" signAssertions="always" 
-                                 encryptAssertions="conditional" encryptNameIds="never"/>
+                                 encryptAssertions="conditional" encryptNameIds="never"
+                                 includeConditionsNotBefore="true"/>
 
         <rp:ProfileConfiguration xsi:type="saml:SAML2AttributeQueryProfile" 
                                  assertionLifetime="PT5M" assertionProxyCount="0" 
                                  signResponses="conditional" signAssertions="never" 
-                                 encryptAssertions="conditional" encryptNameIds="never"/>
+                                 encryptAssertions="conditional" encryptNameIds="never"
+                                 includeConditionsNotBefore="true"/>
         
         <rp:ProfileConfiguration xsi:type="saml:SAML2ArtifactResolutionProfile" 
                                  signResponses="never" signAssertions="always" 

Modified: branches/REL_2/src/main/java/edu/internet2/middleware/shibboleth/idp/profile/saml1/AbstractSAML1ProfileHandler.java

[... 73 lines stripped ...]