[java-metadata-aggregator] branch master updated: MDA-196 - fix exception from includeX509SubjectName
Ian Young
ian at iay.org.uk
Thu Oct 5 06:41:58 EDT 2017
This is an automated email from the git hooks/post-receive script.
iay pushed a commit to branch master
in repository java-metadata-aggregator.
View the commit online:
http://git.shibboleth.net/view/?p=java-metadata-aggregator.git;a=commit;h=77b102d7c162468df96cfc4a6fc85e79a6691f10
The following commit(s) were added to refs/heads/master by this push:
new 77b102d MDA-196 - fix exception from includeX509SubjectName
77b102d is described below
commit 77b102d7c162468df96cfc4a6fc85e79a6691f10
Author: Ian Young <ian at iay.org.uk>
AuthorDate: Thu Oct 5 11:41:43 2017 +0100
MDA-196 - fix exception from includeX509SubjectName
---
.../metadata/dom/XMLSignatureSigningStage.java | 7 +-
.../metadata/dom/XMLSignatureSigningStageTest.java | 40 ++++-
.../dom/XMLSignatureSigningStage-mda196.xml | 177 +++++++++++++++++++++
3 files changed, 217 insertions(+), 7 deletions(-)
diff --git a/aggregator-pipeline/src/main/java/net/shibboleth/metadata/dom/XMLSignatureSigningStage.java b/aggregator-pipeline/src/main/java/net/shibboleth/metadata/dom/XMLSignatureSigningStage.java
index 0af7986..03702f9 100644
--- a/aggregator-pipeline/src/main/java/net/shibboleth/metadata/dom/XMLSignatureSigningStage.java
+++ b/aggregator-pipeline/src/main/java/net/shibboleth/metadata/dom/XMLSignatureSigningStage.java
@@ -883,16 +883,15 @@ public class XMLSignatureSigningStage extends AbstractIteratingStage<Element> {
*
* @throws StageProcessingException thrown if there is a problem creating the X509Data content
*/
- protected void addX509Data(@Nonnull @NonnullElements @Live final ArrayList<Object> keyInfoItems)
- throws StageProcessingException {
- final ArrayList<Object> x509Data = new ArrayList<>();
+ protected void addX509Data(@Nonnull @NonnullElements @Live final ArrayList<Object> keyInfoItems) {
+ final List<Object> x509Data = new ArrayList<>();
if (certificates != null && !certificates.isEmpty()) {
final X509Certificate endEntityCert = certificates.get(0);
if (includeX509SubjectName) {
final X500Principal subjectDn = endEntityCert.getSubjectX500Principal();
- keyInfoItems.add(subjectDn.getName(X500Principal.RFC2253));
+ x509Data.add(subjectDn.getName(X500Principal.RFC2253));
}
if (includeX509Certificates) {
diff --git a/aggregator-pipeline/src/test/java/net/shibboleth/metadata/dom/XMLSignatureSigningStageTest.java b/aggregator-pipeline/src/test/java/net/shibboleth/metadata/dom/XMLSignatureSigningStageTest.java
index 50bbbb9..dbef9d8 100644
--- a/aggregator-pipeline/src/test/java/net/shibboleth/metadata/dom/XMLSignatureSigningStageTest.java
+++ b/aggregator-pipeline/src/test/java/net/shibboleth/metadata/dom/XMLSignatureSigningStageTest.java
@@ -72,7 +72,41 @@ public class XMLSignatureSigningStageTest extends BaseDOMTest {
Element expected = readXMLData("output.xml");
assertXMLIdentical(expected, result.unwrap());
}
-
+
+ /** MDA-196: XMLSignatureSigningStage's includeX509SubjectName property causes exception */
+ @Test
+ public void testMDA196() throws Exception {
+ final Element testInput = readXMLData("input.xml");
+
+ final List<Item<Element>> mdCol = new ArrayList<>();
+ mdCol.add(new DOMElementItem(testInput));
+
+ final PrivateKey signingKey = KeyPairUtil.readPrivateKey(XMLSignatureSigningStageTest.class
+ .getResourceAsStream(classRelativeResource("signingKey.pem")));
+ final X509Certificate signingCert = (X509Certificate) CertUtil.readCertificate(XMLSignatureSigningStageTest.class
+ .getResourceAsStream(classRelativeResource("signingCert.pem")));
+ final List<X509Certificate> certs = new ArrayList<>();
+ certs.add(signingCert);
+
+ final XMLSignatureSigningStage stage = new XMLSignatureSigningStage();
+ stage.setId("test");
+ stage.setIncludeKeyValue(false);
+ stage.setIncludeX509IssuerSerial(true);
+ stage.setIncludeX509SubjectName(true);
+ stage.setPrivateKey(signingKey);
+ stage.setCertificates(certs);
+ stage.initialize();
+
+ stage.execute(mdCol);
+ Assert.assertEquals(mdCol.size(), 1);
+
+ final Item<Element> result = mdCol.iterator().next();
+ AssertSupport.assertValidComponentInfo(result, 1, XMLSignatureSigningStage.class, "test");
+
+ final Element expected = readXMLData("mda196.xml");
+ assertXMLIdentical(expected, result.unwrap());
+ }
+
@Test
public void testSetIdAttributeNamesNull() throws Exception {
final XMLSignatureSigningStage stage = new XMLSignatureSigningStage();
@@ -84,5 +118,5 @@ public class XMLSignatureSigningStageTest extends BaseDOMTest {
// expected
}
}
-
-}
\ No newline at end of file
+
+}
diff --git a/aggregator-pipeline/src/test/resources/net/shibboleth/metadata/dom/XMLSignatureSigningStage-mda196.xml b/aggregator-pipeline/src/test/resources/net/shibboleth/metadata/dom/XMLSignatureSigningStage-mda196.xml
new file mode 100644
index 0000000..7928f87
--- /dev/null
+++ b/aggregator-pipeline/src/test/resources/net/shibboleth/metadata/dom/XMLSignatureSigningStage-mda196.xml
@@ -0,0 +1,177 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" ID="1234" Name="urn:mace:switch.ch:SWITCHaai" validUntil="2010-09-20T15:59:02Z"><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference URI="#1234"><Transforms><Transform Algorithm="http://www.w3 [...]
+Wx+wrnGGhvcwMIIjHVEnU9FMfoDF1XOCN3Um7IwGCBF6+s6NchGsc6igACH2l4vApaJuPRNvnfMZ
+GTvzuyOnP539zh7tTDf7jipnZ0nXwilQel6vaBX7DmSIWIbuMaojJlQGDUzhLWncGPr8OMT7rOLW
+Mvz49bGmgqhDbJgziUYmwm3ZNoy2fgSLI9W2BjWesxPdMs2ivMQ5UK7zUQ2qqc9ULp3/8Ll878ex
+uIlviHTg3dgzWo9IrF69WPOzjvhe2UjqjV5/Ag==</SignatureValue><KeyInfo><X509Data><X509SubjectName>CN=tester,O=Acme,ST=MI,C=US</X509SubjectName><X509Certificate>MIIC8DCCAdgCCQDM0iz5RbOubTANBgkqhkiG9w0BAQUFADA6MQswCQYDVQQGEwJVUzELMAkGA1UE
+CBMCTUkxDTALBgNVBAoTBEFjbWUxDzANBgNVBAMTBnRlc3RlcjAeFw0xMDA5MTUxNzMzMzZaFw0z
+MDA5MTUxNzMzMzZaMDoxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJNSTENMAsGA1UEChMEQWNtZTEP
+MA0GA1UEAxMGdGVzdGVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8URyAf/z/vUR
+AuWKo3529SGnAse7VRmjAuCbMMCK3GRr/UVx1Mpk1pf+16nzGhauKu7DeDKU9c0RJJlJdz+0F29Z
+WtL+lWiKTwFZwhpc4yAMlXZTTZuDfoLdIRIgwStrF7q5chXOAz3fBZL7w9ZwOK2iUmJ7Ut0Qn2TN
+E29JDvyBAcvorr4LhX5HIExvo79ftolj4ZIQxtt6Avz1ZO0cC/z/BnweLrRgTbKDHqHwx6Ei+3rY
+7TwdeZXAK3b2VJu9l0Hm0FPEr0QfH212/pZDytf9/h58VT0jJDpffjtqBnHWletNaBl/gkQBswvt
+vUXUCbJJ5Nv0s/kilbelBWar4QIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQCyVcQo71Fy7Ng75UQr
+g/Nr8Ul+opFy/TP71QczIA+11PvEMUaJyFJ2nNsMCSnqcn0wPZ+S1r5B54DJzua4eoMHZ9kRIoFH
+e1lFX0lNQ2x3pb4aa23m3G4dcJGzSHJWP4oMp/jDCp8wxj3INpA4fs0dtw+iqluHP334pjM/5Dn5
+5NwVlrDAtz++SxYOJXngylff14vdjNCI4m7vBbExuhTafjHxfIlkTKt7fISCQgRyslSMOn6acvRT
+rL5V9hNlY1Vccrw18xQJXbrdPBDu4l9/8J+L1hXz9EGrbWi7thdDlNnuJI+jlYBVNpHHT9ui5Wn3
+ky2gtKCT9MVNOm3GJ/5x</X509Certificate><X509IssuerSerial><X509IssuerName>CN=tester,O=Acme,ST=MI,C=US</X509IssuerName><X509SerialNumber>14758908377974419053</X509SerialNumber></X509IssuerSerial></X509Data></KeyInfo></Signature>
+
+ <Extensions>
+ <switchmd:PublishingInformation xmlns:switchmd="http://www.switch.ch/aai/metadata/extensions">
+ <switchmd:Federation>urn:mace:switch.ch:SWITCHaai</switchmd:Federation>
+ <switchmd:Description>The metadata contains all accepted root CA certificates for the federation and the
+ descriptions of all accepted Identity Providers and Service Providers</switchmd:Description>
+ <switchmd:Author>SWITCH Resource Registry</switchmd:Author>
+ <switchmd:CreationDate type="xs:dateTime">2010-09-15T15:59:02Z</switchmd:CreationDate>
+ <switchmd:Note/>
+ </switchmd:PublishingInformation>
+ </Extensions>
+
+ <EntityDescriptor entityID="https://aai.unifr.ch/idp/shibboleth">
+ <Extensions>
+ <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">unifr.ch</shibmd:Scope>
+ </Extensions>
+ <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
+ <KeyDescriptor use="signing">
+ <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+ <ds:KeyName>aai.unifr.ch</ds:KeyName>
+ <ds:X509Data>
+ <ds:X509Certificate>
+ MIIDGzCCAgOgAwIBAgIUP8Gy5z0CP/joSEYbKGS0Np66XeUwDQYJKoZIhvcNAQEF
+ BQAwFzEVMBMGA1UEAxMMYWFpLnVuaWZyLmNoMB4XDTA5MDczMDEzNTUyNVoXDTEy
+ MDczMDEzNTUyNVowFzEVMBMGA1UEAxMMYWFpLnVuaWZyLmNoMIIBIjANBgkqhkiG
+ 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8TgEsFh5W6xFbiqKgGj23riyn1TWp03p63z
+ qM48wLotMWij1hAQlv3hxSTE39qvWMXt3PwOYn9Ck+O2soVIqGonCeq9MNjQUeSD
+ uZiMUKHq0w/3l/3vbA5KR6dl3x4FaFqv7RaIbO0mu/tH5ScEteuKrNVby9ojQwsI
+ PcTXbbRJrlFKM+2GTeE1mJhd9PquOS/iKqmIpr6c4r7hKu1nErKG7lFrqTA6exKl
+ Nb4dUj3Gp+revcwf6UgZJwBxQ858Noy7BAeg5LT7r1dGE68YmrBPYJLj84jeNyIA
+ /KS5zeeSWZnaHljunjEax9zoSkm3wRgfS6W2ruS/q2DdHxvOzwIDAQABo18wXTA8
+ BgNVHREENTAzggxhYWkudW5pZnIuY2iGI2h0dHBzOi8vYWFpLnVuaWZyLmNoL2lk
+ cC9zaGliYm9sZXRoMB0GA1UdDgQWBBT5gNjirVVpDtJqTpZJVpU7jF+LJDANBgkq
+ hkiG9w0BAQUFAAOCAQEAM/EIJuqE1zWUuUWpbc9uxD1sNv4AQ/wBj7LlAQ4FcJem
+ cZcycgaE1c4IC+hQGQ9pFjAoQQbJmz2P5btQ8SGpNI+gD45OOIaUa7wgKNJeDGR6
+ vLWvyof5uNQ2Af9FpM0l23prY3phkGxtqSKvigOFIJEEuMOTrUikxFtrRdEQ6qDk
+ y4RKFDZ92qV076YLeCI6GX+IMrSKE8GQKxvq32IEw/LlvjC21IJSeTwU9hPQsCLL
+ 06PCqiwBffRqZguTXXOWk0n/Btri44echadREWrOem6cwJuHs6nvQ/iHSjjmHVSs
+ V29q22MI4G0dXLKIBkHsMyrEdS06vIvIbXuILzV6lQ==
+ </ds:X509Certificate>
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </KeyDescriptor>
+ <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai.unifr.ch:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+ <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.unifr.ch:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+ <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+ <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+ <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://aai.unifr.ch/idp/profile/Shibboleth/SSO"/>
+ <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://aai.unifr.ch/idp/profile/SAML2/Redirect/SSO"/>
+ <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://aai.unifr.ch/idp/profile/SAML2/POST/SSO"/>
+ <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://aai.unifr.ch/idp/profile/SAML2/POST-SimpleSign/SSO"/>
+ </IDPSSODescriptor>
+ <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
+ <KeyDescriptor use="signing">
+ <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+ <ds:KeyName>aai.unifr.ch</ds:KeyName>
+ <ds:X509Data>
+ <ds:X509Certificate>
+ MIIDGzCCAgOgAwIBAgIUP8Gy5z0CP/joSEYbKGS0Np66XeUwDQYJKoZIhvcNAQEF
+ BQAwFzEVMBMGA1UEAxMMYWFpLnVuaWZyLmNoMB4XDTA5MDczMDEzNTUyNVoXDTEy
+ MDczMDEzNTUyNVowFzEVMBMGA1UEAxMMYWFpLnVuaWZyLmNoMIIBIjANBgkqhkiG
+ 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8TgEsFh5W6xFbiqKgGj23riyn1TWp03p63z
+ qM48wLotMWij1hAQlv3hxSTE39qvWMXt3PwOYn9Ck+O2soVIqGonCeq9MNjQUeSD
+ uZiMUKHq0w/3l/3vbA5KR6dl3x4FaFqv7RaIbO0mu/tH5ScEteuKrNVby9ojQwsI
+ PcTXbbRJrlFKM+2GTeE1mJhd9PquOS/iKqmIpr6c4r7hKu1nErKG7lFrqTA6exKl
+ Nb4dUj3Gp+revcwf6UgZJwBxQ858Noy7BAeg5LT7r1dGE68YmrBPYJLj84jeNyIA
+ /KS5zeeSWZnaHljunjEax9zoSkm3wRgfS6W2ruS/q2DdHxvOzwIDAQABo18wXTA8
+ BgNVHREENTAzggxhYWkudW5pZnIuY2iGI2h0dHBzOi8vYWFpLnVuaWZyLmNoL2lk
+ cC9zaGliYm9sZXRoMB0GA1UdDgQWBBT5gNjirVVpDtJqTpZJVpU7jF+LJDANBgkq
+ hkiG9w0BAQUFAAOCAQEAM/EIJuqE1zWUuUWpbc9uxD1sNv4AQ/wBj7LlAQ4FcJem
+ cZcycgaE1c4IC+hQGQ9pFjAoQQbJmz2P5btQ8SGpNI+gD45OOIaUa7wgKNJeDGR6
+ vLWvyof5uNQ2Af9FpM0l23prY3phkGxtqSKvigOFIJEEuMOTrUikxFtrRdEQ6qDk
+ y4RKFDZ92qV076YLeCI6GX+IMrSKE8GQKxvq32IEw/LlvjC21IJSeTwU9hPQsCLL
+ 06PCqiwBffRqZguTXXOWk0n/Btri44echadREWrOem6cwJuHs6nvQ/iHSjjmHVSs
+ V29q22MI4G0dXLKIBkHsMyrEdS06vIvIbXuILzV6lQ==
+ </ds:X509Certificate>
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </KeyDescriptor>
+ <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://aai.unifr.ch:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+ <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://aai.unifr.ch:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
+ <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+ <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+ </AttributeAuthorityDescriptor>
+ <Organization>
+ <OrganizationName xml:lang="en">unifr.ch</OrganizationName>
+ <OrganizationDisplayName xml:lang="de">Université de Fribourg - Universität
+ Freiburg</OrganizationDisplayName>
+ <OrganizationDisplayName xml:lang="en">University of Fribourg</OrganizationDisplayName>
+ <OrganizationDisplayName xml:lang="fr">Université de Fribourg - Universität
+ Freiburg</OrganizationDisplayName>
+ <OrganizationURL xml:lang="fr">http://www.unifr.ch/aai</OrganizationURL>
+ </Organization>
+ </EntityDescriptor>
+
+ <EntityDescriptor entityID="https://hestia.switch.ch/shibboleth">
+ <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
+ <KeyDescriptor>
+ <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+ <ds:KeyName>hestia.switch.ch</ds:KeyName>
+ <ds:X509Data>
+ <ds:X509Certificate>
+ MIIE6zCCA9OgAwIBAgICGYMwDQYJKoZIhvcNAQEFBQAwazELMAkGA1UEBhMCQk0x
+ GTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxHzAdBgNVBAsTFnd3dy5xdW92YWRp
+ c2dsb2JhbC5jb20xIDAeBgNVBAMTF1F1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBMB4X
+ DTA5MTEwNjE1NDYxMloXDTExMTEwNjE1NDYxMlowbDELMAkGA1UEBhMCQ0gxEDAO
+ BgNVBAgTB1p1ZXJpY2gxEDAOBgNVBAcTB1p1ZXJpY2gxDzANBgNVBAoTBlNXSVRD
+ SDENMAsGA1UECxMER3JpZDEZMBcGA1UEAxMQaGVzdGlhLnN3aXRjaC5jaDCCASIw
+ DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTEbtUuBQsjbDJb9YUV2dHZUEjb
+ nCkwYACmMvOkt16Q/oqpJwYqptIaICu7VC9bnKyLwrUzfujnwld1C7jzC78gpvDC
+ TL+q2YzOzaRf+iXXFOpBenpKQNL2gexKOwCJVm3GYPfRCv14K6CZOztFiaB45rdp
+ uz4mKONG2YBpIqlv+eqau+I0f4HG3jyLbIbJzUHYZqyyYKuLScQt5pfnOl7SgWtw
+ BJhb9W00zLa7+lnwpwHORCAsKPDoZ8Yuz47sSasEkEI2/IF8zKVi5nvURcv5gYQE
+ yu88oCwWGGlK0o9YkXzWCoAhqKKr+aq6SPXHbCSAUYE/csOojGYaDSABdqcCAwEA
+ AaOCAZYwggGSMHQGCCsGAQUFBwEBBGgwZjAqBggrBgEFBQcwAYYeaHR0cDovL29j
+ c3AucXVvdmFkaXNnbG9iYWwuY29tMDgGCCsGAQUFBzAChixodHRwOi8vdHJ1c3Qu
+ cXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsaWNhLmNydDAbBgNVHREEFDASghBoZXN0
+ aWEuc3dpdGNoLmNoMFEGA1UdIARKMEgwRgYMKwYBBAG+WAACZAEBMDYwNAYIKwYB
+ BQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkw
+ DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAf
+ BgNVHSMEGDAWgBQyTaFP6vCumbbumwcshAgRUIvifjA7BgNVHR8ENDAyMDCgLqAs
+ hipodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGljYS5jcmwwHQYD
+ VR0OBBYEFLdZ7uyB5hnQVdsFPUOSvVF23ntfMA0GCSqGSIb3DQEBBQUAA4IBAQBt
+ p3f3dMlWqWX3+zaL21I1gRVkz4dMkLpPcTjiqTOYU7fcpYOH8LzB5Wqr3wGWmUGt
+ lB7U9BwHkj7NFheNQEsfXu1m4m7Nw7aKxuspRtqY+0IB4QseJd+Ds/ZXJMVlwi+R
+ IwJHFeX7m+Ypo3Y8HjT2ZjwmmX31ywyIQ33pMsBAX8DtbS1aAYlDs7s8x//X4gux
+ p/8vUNkLdVhecIRbl0xX++mFKOyAOuEeoXQXZe48vBu6EIoYe2KpGqGuPu5now1F
+ UhTH7MXDaBv7yUATibJJpTBaS0Gz3oUikjwWjSfsJIY1KF+vmZqtajlhKHNAAaQo
+ /xGNZR7tBqnS8KjsJU9r
+ </ds:X509Certificate>
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </KeyDescriptor>
+ <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://hestia.switch.ch/Shibboleth.sso/SLO/Redirect"/>
+ <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://hestia.switch.ch/Shibboleth.sso/SLO/POST"/>
+ <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://hestia.switch.ch/Shibboleth.sso/SLO/Artifact"/>
+ <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://hestia.switch.ch/Shibboleth.sso/SLO/SOAP"/>
+ <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://hestia.switch.ch/Shibboleth.sso/NIM/Redirect"/>
+ <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://hestia.switch.ch/Shibboleth.sso/NIM/POST"/>
+ <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://hestia.switch.ch/Shibboleth.sso/NIM/Artifact"/>
+ <ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://hestia.switch.ch/Shibboleth.sso/NIM/SOAP"/>
+ <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+ <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+ <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://hestia.switch.ch/Shibboleth.sso/SAML2/POST" index="1"/>
+ <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://hestia.switch.ch/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
+ <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://hestia.switch.ch/Shibboleth.sso/SAML2/Artifact" index="3"/>
+ <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://hestia.switch.ch/Shibboleth.sso/SAML2/ECP" index="4"/>
+ <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://hestia.switch.ch/Shibboleth.sso/SAML/POST" index="5"/>
+ <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://hestia.switch.ch/Shibboleth.sso/SAML/Artifact" index="6"/>
+ </SPSSODescriptor>
+ <Organization>
+ <OrganizationName xml:lang="en">switch.ch</OrganizationName>
+ <OrganizationDisplayName xml:lang="en">SWITCH</OrganizationDisplayName>
+ <OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
+ </Organization>
+ </EntityDescriptor>
+
+</EntitiesDescriptor>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list