[java-identity-provider COMMIT] /trunk/idp-conf/src/main/resources/system/conf/legacy-relying-party-defaults.xml

[noreply at shibboleth.net]

Author: scantor
Date: Fri Dec 19 21:02:17 2014
New Revision: 7205

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7205&view=rev
Log:
Legacy configs parse the metadata elements, so we need to have a bean in scope for any Signature filters.

Modified:
    trunk/idp-conf/src/main/resources/system/conf/legacy-relying-party-defaults.xml   (contents, props changed)

Modified: trunk/idp-conf/src/main/resources/system/conf/legacy-relying-party-defaults.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/conf/legacy-relying-party-defaults.xml?rev=7205&r1=7204&r2=7205&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/conf/legacy-relying-party-defaults.xml (original)
+++ trunk/idp-conf/src/main/resources/system/conf/legacy-relying-party-defaults.xml Fri Dec 19 21:02:17 2014
@@ -1,84 +1,92 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<beans xmlns="http://www.springframework.org/schema/beans"
-	   xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:util="http://www.springframework.org/schema/util"
-	   xmlns:c="http://www.springframework.org/schema/c" xmlns:p="http://www.springframework.org/schema/p"
-	   xmlns:context="http://www.springframework.org/schema/context"
-	   xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
-                           http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
-                           http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd"
-                           
-        default-init-method="initialize"
-        default-destroy-method="destroy">
-	
-    <!--  SAML2 -->
-    <bean id="shibboleth.SAML2.Artifact.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/saml-soap" />
-        
-    <bean id="shibboleth.SAML2.Logout.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="%{idp.artifact.endpointIndex:2}" />
-    <bean id="shibboleth.SAML2.Logout.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/saml2-slo" />
-
-    <bean id="shibboleth.SAML2.AttributeQuery.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="%{idp.artifact.endpointIndex:2}" />
-    <bean id="shibboleth.SAML2.AttributeQuery.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/saml-soap" />
-
-    <bean id="shibboleth.SAML2.BrowserSSO.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="%{idp.artifact.endpointIndex:2}" />
-    <bean id="shibboleth.SAML2.BrowserSSO.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/saml2-sso" />
-        
-    <bean id="shibboleth.SAML2.ECP.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/saml2-ecp" />
-
-    <!--  SAML2 - Liberty -->
-    <bean id="shibboleth.SAML2.SSOS.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/saml2-ssos" /><!-- TODO -->
-
-    <!--  SAML1 -->
-    <bean id="shibboleth.SAML1.Artifact.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/saml-soap" />
-        
-    <bean id="shibboleth.SAML1.AttributeQuery.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="%{idp.artifact.endpointIndex:2}" />
-    <bean id="shibboleth.SAML1.AttributeQuery.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/saml-soap" />
-        
-    <bean id="shibboleth.SAML1.BrowserSSO.ArtifactServiceIndex" class="java.lang.String"
-        c:_0="%{idp.artifact.endpointIndex:2}" />
-    <bean id="shibboleth.SAML1.BrowserSSO.InboundFlowId" class="java.lang.String"
-        c:_0="security-policy/shibboleth-sso" />
-
-    <bean id="shibboleth.MetadataPKIXValidationInformationResolver"
-        class="net.shibboleth.idp.saml.security.impl.MetadataPKIXValidationInformationResolver"
-        c:resolver-ref="shibboleth.RoleDescriptorResolver" />
-
-    <!-- Trust Engines -->
-
-    <bean id="shibboleth.SignatureTrustEngine"
-            class="org.opensaml.xmlsec.signature.support.impl.ChainingSignatureTrustEngine">
-        <constructor-arg>
-            <list>
-                <bean class="org.opensaml.xmlsec.signature.support.impl.ExplicitKeySignatureTrustEngine"
-                    c:resolver-ref="shibboleth.MetadataCredentialResolver"
-                    c:keyInfoResolver-ref="shibboleth.KeyInfoCredentialResolver" />
-                <bean class="org.opensaml.xmlsec.signature.support.impl.PKIXSignatureTrustEngine" 
-                    c:resolver-ref="shibboleth.MetadataPKIXValidationInformationResolver"
-                    c:keyInfoResolver-ref="shibboleth.KeyInfoCredentialResolver" />
-            </list>
-        </constructor-arg>
-    </bean>
-
-    <bean id="shibboleth.X509TrustEngine" class="org.opensaml.security.trust.impl.ChainingTrustEngine">
-        <constructor-arg>

[... 103 lines stripped ...]