[java-opensaml] branch main updated: Don't use https for InCommon MDQ endpoint

[Ian Young]

This is an automated email from the git hooks/post-receive script.

iay pushed a commit to branch main
in repository java-opensaml.

View the commit online:
http://git.shibboleth.net/view/?p=java-opensaml.git;a=commit;h=261f74a0b8533fcc1dd0a410d242cb91787f3ef5

The following commit(s) were added to refs/heads/main by this push:
     new 261f74a0b Don't use https for InCommon MDQ endpoint
261f74a0b is described below

commit 261f74a0b8533fcc1dd0a410d242cb91787f3ef5
Author: Ian Young <ian at iay.org.uk>
AuthorDate: Thu Dec 1 16:09:30 2022 +0000

    Don't use https for InCommon MDQ endpoint
    
    The InCommon MDQ endpoint uses an Amazon TLS certificate which is
    2048-bit all the way to the root of the chain. This is incompatible
    with the RHEL 9 FUTURE crypto policy, and the test doesn't actually
    require TLS here, so I've used http:// instead. Confirmed with Nicole
    Roy that this is a supported configuration, even though not documented.
---
 .../resolver/impl/AbstractDynamicHTTPMetadataResolverTest.java        | 4 ++--
 .../resolver/impl/FunctionDrivenDynamicHTTPMetadataResolverTest.java  | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/opensaml-saml-impl/src/test/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolverTest.java b/opensaml-saml-impl/src/test/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolverTest.java
index 098199fe9..84cf7753c 100644
--- a/opensaml-saml-impl/src/test/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolverTest.java
+++ b/opensaml-saml-impl/src/test/java/org/opensaml/saml/metadata/resolver/impl/AbstractDynamicHTTPMetadataResolverTest.java
@@ -90,7 +90,7 @@ public class AbstractDynamicHTTPMetadataResolverTest extends XMLObjectBaseTestCa
         allowActivation = false;
         
         // Test uses MDQ protocol
-        String baseURL = "https://mdq.incommon.org";
+        String baseURL = "http://mdq.incommon.org";
         String entityID = "urn:mace:incommon:osu.edu";
         String requestURL = new MetadataQueryProtocolRequestURLBuilder(baseURL).apply(new CriteriaSet(new EntityIdCriterion(entityID)));
         
@@ -103,7 +103,7 @@ public class AbstractDynamicHTTPMetadataResolverTest extends XMLObjectBaseTestCa
     @Test
     public void testBasicRequest() throws ResolverException {
         // Test uses MDQ protocol
-        String baseURL = "https://mdq.incommon.org";
+        String baseURL = "http://mdq.incommon.org";
         String entityID = "urn:mace:incommon:osu.edu";
         String requestURL = new MetadataQueryProtocolRequestURLBuilder(baseURL).apply(new CriteriaSet(new EntityIdCriterion(entityID)));
         
diff --git a/opensaml-saml-impl/src/test/java/org/opensaml/saml/metadata/resolver/impl/FunctionDrivenDynamicHTTPMetadataResolverTest.java b/opensaml-saml-impl/src/test/java/org/opensaml/saml/metadata/resolver/impl/FunctionDrivenDynamicHTTPMetadataResolverTest.java
index 791b1ea34..a91937a66 100644
--- a/opensaml-saml-impl/src/test/java/org/opensaml/saml/metadata/resolver/impl/FunctionDrivenDynamicHTTPMetadataResolverTest.java
+++ b/opensaml-saml-impl/src/test/java/org/opensaml/saml/metadata/resolver/impl/FunctionDrivenDynamicHTTPMetadataResolverTest.java
@@ -247,7 +247,7 @@ public class FunctionDrivenDynamicHTTPMetadataResolverTest extends XMLObjectBase
     
     @Test
     public void testMDQ() throws Exception {
-        String baseURL = "https://mdq.incommon.org";
+        String baseURL = "http://mdq.incommon.org";
         String entityID = "urn:mace:incommon:osu.edu";
         
         MetadataQueryProtocolRequestURLBuilder requestURLBuilder = new MetadataQueryProtocolRequestURLBuilder(baseURL);
@@ -269,7 +269,7 @@ public class FunctionDrivenDynamicHTTPMetadataResolverTest extends XMLObjectBase
     
     @Test
     public void testMDQViaArtifact() throws Exception {
-        String baseURL = "https://mdq.incommon.org";
+        String baseURL = "http://mdq.incommon.org";
         String entityID = "urn:mace:incommon:osu.edu";
         
         MetadataQueryProtocolRequestURLBuilder requestURLBuilder = new MetadataQueryProtocolRequestURLBuilder(baseURL,

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.