[java-shib-idp2 COMMIT] in /branches/REL_2: doc/RELEASE-NOTES.txt src/installer/resources/metadata-tmpl/idp-metadata.xml

[noreply at shibboleth.net]

Author: scantor
Date: Fri Oct 17 19:02:40 2014
New Revision: 3202

URL: http://svn.shibboleth.net/view/java-shib-idp2?rev=3202&view=rev
Log:
SIDP-620 - Generated metadata should not include signing-only certificate without a use attribute

Modified:
    branches/REL_2/doc/RELEASE-NOTES.txt
    branches/REL_2/src/installer/resources/metadata-tmpl/idp-metadata.xml

Modified: branches/REL_2/doc/RELEASE-NOTES.txt
URL: http://svn.shibboleth.net/view/java-shib-idp2/branches/REL_2/doc/RELEASE-NOTES.txt?rev=3202&r1=3201&r2=3202&view=diff
==============================================================================
--- branches/REL_2/doc/RELEASE-NOTES.txt (original)
+++ branches/REL_2/doc/RELEASE-NOTES.txt Fri Oct 17 19:02:40 2014
@@ -3,6 +3,10 @@
 
 Feature Highlights:
 https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInterestingFeatures
+
+Changes in Release 2.4.3
+=============================================
+[SIDP-620] - Generated metadata should not include signing-only certificate without a use attribute
 
 Changes in Release 2.4.2
 =============================================

Modified: branches/REL_2/src/installer/resources/metadata-tmpl/idp-metadata.xml
URL: http://svn.shibboleth.net/view/java-shib-idp2/branches/REL_2/src/installer/resources/metadata-tmpl/idp-metadata.xml?rev=3202&r1=3201&r2=3202&view=diff
==============================================================================
--- branches/REL_2/src/installer/resources/metadata-tmpl/idp-metadata.xml (original)
+++ branches/REL_2/src/installer/resources/metadata-tmpl/idp-metadata.xml Fri Oct 17 19:02:40 2014
@@ -7,7 +7,7 @@
             <shibmd:Scope regexp="false">$IDP_SCOPE$</shibmd:Scope>
         </Extensions>
 
-        <KeyDescriptor>
+        <KeyDescriptor use="signing">
             <ds:KeyInfo>
                 <ds:X509Data>
                     <ds:X509Certificate>
@@ -45,7 +45,7 @@
             <shibmd:Scope regexp="false">$IDP_SCOPE$</shibmd:Scope>
         </Extensions>
 
-        <KeyDescriptor>
+        <KeyDescriptor use="signing">
             <ds:KeyInfo>
                 <ds:X509Data>
                     <ds:X509Certificate>