[java-metadata-aggregator] branch main updated: MDA-270 - Supply more detail on unconvertable X.509 certificates
Ian Young
ian at iay.org.uk
Tue Oct 18 13:58:05 UTC 2022
This is an automated email from the git hooks/post-receive script.
iay pushed a commit to branch main
in repository java-metadata-aggregator.
View the commit online:
http://git.shibboleth.net/view/?p=java-metadata-aggregator.git;a=commit;h=998d8a36d172d5a3d8ee03194c1bc01af4a00d18
The following commit(s) were added to refs/heads/main by this push:
new 998d8a3 MDA-270 - Supply more detail on unconvertable X.509 certificates
998d8a3 is described below
commit 998d8a36d172d5a3d8ee03194c1bc01af4a00d18
Author: Ian Young <ian at iay.org.uk>
AuthorDate: Tue Oct 18 14:58:02 2022 +0100
MDA-270 - Supply more detail on unconvertable X.509 certificates
https://shibboleth.atlassian.net/browse/MDA-270
---
.../metadata/dom/ds/X509ValidationStage.java | 5 +-
.../metadata/dom/ds/X509ValidationStageTest.java | 27 ++-
.../metadata/dom/ds/X509ValidationStage-mda270.xml | 207 +++++++++++++++++++++
3 files changed, 237 insertions(+), 2 deletions(-)
diff --git a/mda-framework/src/main/java/net/shibboleth/metadata/dom/ds/X509ValidationStage.java b/mda-framework/src/main/java/net/shibboleth/metadata/dom/ds/X509ValidationStage.java
index c7122a0..a3ce6d1 100644
--- a/mda-framework/src/main/java/net/shibboleth/metadata/dom/ds/X509ValidationStage.java
+++ b/mda-framework/src/main/java/net/shibboleth/metadata/dom/ds/X509ValidationStage.java
@@ -99,6 +99,7 @@ public class X509ValidationStage extends AbstractDOMValidationStage<X509Certific
private CertificateFactory factory;
@Override
+ @Nonnull
protected Context buildContext(@Nonnull final Item<Element> item) {
return new Context(item);
}
@@ -126,7 +127,9 @@ public class X509ValidationStage extends AbstractDOMValidationStage<X509Certific
context.add(cert);
applyValidators(cert, context);
}
- } catch (final CertificateException | DecodingException e) {
+ } catch (final CertificateException e) {
+ addError(context.getItem(), element, "X.509 certificate: " + e.getMessage());
+ } catch (DecodingException e) {
addError(context.getItem(), element, "could not convert X509Certficate data");
}
}
diff --git a/mda-framework/src/test/java/net/shibboleth/metadata/dom/ds/X509ValidationStageTest.java b/mda-framework/src/test/java/net/shibboleth/metadata/dom/ds/X509ValidationStageTest.java
index 88948cf..65084f0 100644
--- a/mda-framework/src/test/java/net/shibboleth/metadata/dom/ds/X509ValidationStageTest.java
+++ b/mda-framework/src/test/java/net/shibboleth/metadata/dom/ds/X509ValidationStageTest.java
@@ -137,5 +137,30 @@ public class X509ValidationStageTest extends BaseDOMTest {
errorsAndWarnings(item, 0, 1);
}
-
+
+ @Test
+ public void badCertificateNullIssuerMDA270() throws Exception {
+ final DOMElementItem item = makeItem("mda270.xml");
+
+ final List<Item<Element>> items = new ArrayList<>();
+ items.add(item);
+
+ final X509ValidationStage stage = makeStage();
+ stage.initialize();
+
+ stage.execute(items);
+ stage.destroy();
+
+ // We expect two errors, one for each occurrence of the certificate
+ errorsAndWarnings(item, 2, 0);
+
+ // Peek at the first of those
+ var error = item.getItemMetadata().get(ErrorStatus.class).get(0);
+ var message = error.getStatusMessage();
+
+ // We do NOT want to see the generic message, but the specific one
+ // thrown by CertificateFactory. Allow some latitude in verifying this.
+ System.out.println(message);
+ Assert.assertTrue(message.toLowerCase().contains("empty issuer dn"));
+ }
}
diff --git a/mda-framework/src/test/resources/net/shibboleth/metadata/dom/ds/X509ValidationStage-mda270.xml b/mda-framework/src/test/resources/net/shibboleth/metadata/dom/ds/X509ValidationStage-mda270.xml
new file mode 100644
index 0000000..b9188e0
--- /dev/null
+++ b/mda-framework/src/test/resources/net/shibboleth/metadata/dom/ds/X509ValidationStage-mda270.xml
@@ -0,0 +1,207 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<!--
+ Test for MDA-270. The certificate that appears in this metadata has a null issuer,
+ which is (for Java) unacceptable.
+-->
+<md:EntitiesDescriptor
+ xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+ xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+ xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
+ xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute"
+ xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
+ xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
+ xmlns:xrd="http://docs.oasis-open.org/ns/xri/xrd-1.0"
+ xmlns:pyff="http://pyff.io/NS"
+ xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
+ xmlns:xs="http://www.w3.org/2001/XMLSchema"
+ xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xmlns:ser="http://eidas.europa.eu/metadata/servicelist"
+ xmlns:eidas="http://eidas.europa.eu/saml-extensions"
+ xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
+ xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport"
+ xmlns:hoksso="urn:oasis:names:tc:SAML:2.0:profiles:holder-of-key:SSO:browser"
+ xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
+ xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
+ xmlns:remd="http://refeds.org/metadata"
+ xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"
+ xmlns:xi="http://www.w3.org/2001/XInclude"
+ xmlns:ukfedlabel="http://ukfederation.org.uk/2006/11/label"
+ xmlns:req-attr="urn:oasis:names:tc:SAML:protocol:ext:req-attr"
+ xmlns:oaf="http://schemas.eduserv.org.uk/openathens-federation/1.0"
+ xmlns:fed="http://docs.oasis-open.org/wsfed/federation/200706"
+ xmlns:privacy="http://docs.oasis-open.org/wsfed/privacy/200706"
+ xmlns:dsig="http://www.w3.org/2000/09/xmldsig#"
+ xmlns:disco="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
+ xmlns:mduri="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
+ xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
+ xmlns:elab="http://eduserv.org.uk/labels"
+ xmlns:wayf="http://sdss.ac.uk/2006/06/WAYF"
+ xmlns:auth="http://docs.oasis-open.org/wsfed/authorization/200706"
+ xmlns:wsa="http://www.w3.org/2005/08/addressing"
+ xmlns:taat="http://www.eenet.ee/EENet/urn"
+ xmlns:saml1md="urn:mace:shibboleth:metadata:1.0"
+ xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+ xmlns:ns1="http://www.w3.org/2000/09/xmldsig#"
+ xmlns:ns2="urn:oasis:names:tc:SAML:metadata:attribute"
+ xmlns:algsupport="urn:oasis:names:tc:SAML:metadata:algsupport"
+ xmlns:req="urn:oasis:names:tc:SAML:profiles:SSO:request-init"
+ xmlns:refeds="http://refeds.org/metadata"
+ xmlns:eduidmd="http://eduid.cz/schema/metadata/1.0"
+ xmlns:ns0="urn:oasis:names:tc:SAML:2.0:metadata"
+ xmlns:ns3="urn:oasis:names:tc:SAML:2.0:assertion"
+ xmlns:ns4="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
+ xmlns:ns5="urn:oasis:names:tc:SAML:metadata:algsupport"
+ xmlns:ns6="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
+ xmlns:ns7="urn:oasis:names:tc:SAML:metadata:ui"
+ xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
+ Name="http://edugain.org/" ID="eduGAIN" validUntil="2022-09-14T08:33:25Z" cacheDuration="PT6H">
+
+ <md:EntityDescriptor entityID="https://ola3-dev.it.auth.gr/simplesamlphp/module.php/saml/sp/metadata.php/ola3-dev">
+ <md:Extensions>
+ <mdrpi:RegistrationInfo registrationAuthority="http://aai.grnet.gr/">
+ <mdrpi:RegistrationPolicy xml:lang="en">http://aai.grnet.gr/static/policy/policy-en-1.1.0.pdf</mdrpi:RegistrationPolicy>
+ <mdrpi:RegistrationPolicy xml:lang="el">http://aai.grnet.gr/static/policy/policy-el-1.1.0.pdf</mdrpi:RegistrationPolicy>
+ </mdrpi:RegistrationInfo>
+ </md:Extensions>
+ <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol">
+ <md:Extensions>
+ <mdui:UIInfo>
+ <mdui:DisplayName xml:lang="en">Online Learning Agreement dev</mdui:DisplayName>
+ <mdui:Description xml:lang="en">Prepare your Learning Agreement online and share it with both home and host universities.</mdui:Description>
+ <mdui:InformationURL xml:lang="en">https://ola3-dev.it.auth.gr/</mdui:InformationURL>
+ <mdui:Logo width="3711" height="2191">https://ola3-dev.it.auth.gr/themes/custom/ola_theme/logo.png</mdui:Logo>
+ </mdui:UIInfo>
+ </md:Extensions>
+ <md:KeyDescriptor use="signing">
+ <ds:KeyInfo>
+ <ds:X509Data>
+ <ds:X509Certificate>MIIErzCCApegAwIBAgIUXi75tNUXqSIhN4ryWS6hrYeV0G8wDQYJKoZIhvcNAQELBQAwADAeFw0yMjA2MzAxMjI4NTJaFw0zMjA2MjcxMjI4NTJaMAAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2sBcAxPDazrNmVQPZDZx1LIGS2JxeujEu+eKcamj9GlLNYwzADzkIgRY1EQYO2ppDsHlRcOUSnO706fKlxFjAy6PlgOq8UatyyR/4qjsuuriObZpKFfznaKdeUhogHP+IgksXQmpRy5vwnRLYryUeKdCymP4o2SuvkbysHozhil5Fvb4qcWpTy9xnx4VjxysSAkb2dp1OO5S6vpWw0/TYmUOYVcrSAmDqqWVOf+xccWm4IB+fGyycadPSi/mOvKcfPl25DJ//XG9cj10/g2zJTUBdPRFb/CAEDQ9IBXvf7BRW [...]
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </md:KeyDescriptor>
+ <md:KeyDescriptor use="encryption">
+ <ds:KeyInfo>
+ <ds:X509Data>
+ <ds:X509Certificate>MIIErzCCApegAwIBAgIUXi75tNUXqSIhN4ryWS6hrYeV0G8wDQYJKoZIhvcNAQELBQAwADAeFw0yMjA2MzAxMjI4NTJaFw0zMjA2MjcxMjI4NTJaMAAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2sBcAxPDazrNmVQPZDZx1LIGS2JxeujEu+eKcamj9GlLNYwzADzkIgRY1EQYO2ppDsHlRcOUSnO706fKlxFjAy6PlgOq8UatyyR/4qjsuuriObZpKFfznaKdeUhogHP+IgksXQmpRy5vwnRLYryUeKdCymP4o2SuvkbysHozhil5Fvb4qcWpTy9xnx4VjxysSAkb2dp1OO5S6vpWw0/TYmUOYVcrSAmDqqWVOf+xccWm4IB+fGyycadPSi/mOvKcfPl25DJ//XG9cj10/g2zJTUBdPRFb/CAEDQ9IBXvf7BRW [...]
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </md:KeyDescriptor>
+ <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://ola3-dev.it.auth.gr/simplesamlphp/module.php/saml/sp/saml2-logout.php/ola3-dev"/>
+ <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://ola3-dev.it.auth.gr/simplesamlphp/module.php/saml/sp/saml2-acs.php/ola3-dev" index="0"/>
+ <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://ola3-dev.it.auth.gr/simplesamlphp/module.php/saml/sp/saml1-acs.php/ola3-dev" index="1"/>
+ <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://ola3-dev.it.auth.gr/simplesamlphp/module.php/saml/sp/saml2-acs.php/ola3-dev" index="2"/>
+ <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://ola3-dev.it.auth.gr/simplesamlphp/module.php/saml/sp/saml1-acs.php/ola3-dev/artifact" index="3"/>
+ <md:AttributeConsumingService index="0">
+ <md:ServiceName xml:lang="en">Online Learning Agreement dev</md:ServiceName>
+ <md:ServiceDescription xml:lang="en">Prepare your Learning Agreement online and share it with both home and host universities.</md:ServiceDescription>
+ <md:RequestedAttribute Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+ <md:RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+ <md:RequestedAttribute Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+ </md:AttributeConsumingService>
+ </md:SPSSODescriptor>
+ <md:Organization>
+ <md:OrganizationName xml:lang="en">Online Learning Agreement dev</md:OrganizationName>
+ <md:OrganizationDisplayName xml:lang="en">Online Learning Agreement dev</md:OrganizationDisplayName>
+ <md:OrganizationURL xml:lang="en">https://ola3-dev.it.auth.gr</md:OrganizationURL>
+ </md:Organization>
+ <md:ContactPerson contactType="administrative">
+ <md:Company>IT Center of Aristotle University of Thessaloniki</md:Company>
+ <md:EmailAddress>support at auth.gr</md:EmailAddress>
+ <md:TelephoneNumber>2310999000</md:TelephoneNumber>
+ </md:ContactPerson>
+ <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+ <md:Company>IT Center of Aristotle University of Thessaloniki</md:Company>
+ <md:EmailAddress>support at auth.gr</md:EmailAddress>
+ <md:TelephoneNumber>2310999000</md:TelephoneNumber>
+ </md:ContactPerson>
+ <md:ContactPerson contactType="support">
+ <md:Company>IT Center of Aristotle University of Thessaloniki</md:Company>
+ <md:EmailAddress>support at auth.gr</md:EmailAddress>
+ <md:TelephoneNumber>2310999000</md:TelephoneNumber>
+ </md:ContactPerson>
+ <md:ContactPerson contactType="technical">
+ <md:GivenName>IT Center of Aristotle University of Thessaloniki</md:GivenName>
+ <md:EmailAddress>support at auth.gr</md:EmailAddress>
+ </md:ContactPerson>
+ </md:EntityDescriptor>
+ <md:EntityDescriptor entityID="https://orp.ia.forth.gr/sp">
+ <md:Extensions>
+ <mdattr:EntityAttributes>
+ <saml:Attribute Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+ <saml:AttributeValue>http://refeds.org/category/research-and-scholarship</saml:AttributeValue>
+ <saml:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</saml:AttributeValue>
+ </saml:Attribute>
+ <saml:Attribute Name="urn:oasis:names:tc:SAML:attribute:assurance-certification" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+ <saml:AttributeValue>https://refeds.org/sirtfi</saml:AttributeValue>
+ </saml:Attribute>
+ </mdattr:EntityAttributes>
+ <mdrpi:RegistrationInfo registrationAuthority="http://aai.grnet.gr/">
+ <mdrpi:RegistrationPolicy xml:lang="en">http://aai.grnet.gr/static/policy/policy-en-1.1.0.pdf</mdrpi:RegistrationPolicy>
+ <mdrpi:RegistrationPolicy xml:lang="el">http://aai.grnet.gr/static/policy/policy-el-1.1.0.pdf</mdrpi:RegistrationPolicy>
+ </mdrpi:RegistrationInfo>
+ </md:Extensions>
+ <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+ <md:Extensions>
+ <mdui:UIInfo>
+ <mdui:DisplayName xml:lang="en">ORP Telescope Booking System</mdui:DisplayName>
+ <mdui:Description xml:lang="en">ORP Telescope Booking System is a service that allows researchers all over the world to register their telescopes and allow booking by other researchers. Part of OPTICON-RadioNet Pilot EU Program.</mdui:Description>
+ <mdui:InformationURL xml:lang="en">https://www.ia.forth.gr/</mdui:InformationURL>
+ <mdui:InformationURL xml:lang="el">https://www.ia.forth.gr/el</mdui:InformationURL>
+ <mdui:PrivacyStatementURL xml:lang="en">https://orp.ia.forth.gr/privacy</mdui:PrivacyStatementURL>
+ <mdui:Logo width="100" height="146" xml:lang="en">https://www.ia.forth.gr/sites/default/files/inline-images/ia-logo.png</mdui:Logo>
+ </mdui:UIInfo>
+ </md:Extensions>
+ <md:KeyDescriptor use="signing">
+ <ds:KeyInfo>
+ <ds:X509Data>
+ <ds:X509Certificate>MIIGyzCCBLOgAwIBAgIUXc4rw2/eaDPqeJYXiN4mbgQSNykwDQYJKoZIhvcNAQELBQAwgdcxCzAJBgNVBAYTAkdSMQ4wDAYDVQQIDAVDcmV0ZTESMBAGA1UEBwwJSGVyYWtsaW9uMUAwPgYDVQQKDDdGb3VuZGF0aW9uIGZvciBSZXNlYXJjaCBhbmQgVGVjaG5vbG9neSAtIEhlbGxhcyAoRk9SVEgpMScwJQYDVQQLDB5JbnN0aXR1dGUgb2YgQXN0cm9waHlzaWNzIChJQSkxGDAWBgNVBAMMD29ycC5pYS5mb3J0aC5ncjEfMB0GCSqGSIb3DQEJARYQc2FtbEBpYS5mb3J0aC5ncjAeFw0yMjAxMjExMjE0NTdaFw0zMjAxMTkxMjE0NTdaMIHXMQswCQYDVQQGEwJHUjEOMAwGA1UECAwFQ3JldGUxEjAQBgNVBAcMCUhl [...]
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </md:KeyDescriptor>
+ <md:KeyDescriptor use="encryption">
+ <ds:KeyInfo>
+ <ds:X509Data>
+ <ds:X509Certificate>MIIGyzCCBLOgAwIBAgIUXc4rw2/eaDPqeJYXiN4mbgQSNykwDQYJKoZIhvcNAQELBQAwgdcxCzAJBgNVBAYTAkdSMQ4wDAYDVQQIDAVDcmV0ZTESMBAGA1UEBwwJSGVyYWtsaW9uMUAwPgYDVQQKDDdGb3VuZGF0aW9uIGZvciBSZXNlYXJjaCBhbmQgVGVjaG5vbG9neSAtIEhlbGxhcyAoRk9SVEgpMScwJQYDVQQLDB5JbnN0aXR1dGUgb2YgQXN0cm9waHlzaWNzIChJQSkxGDAWBgNVBAMMD29ycC5pYS5mb3J0aC5ncjEfMB0GCSqGSIb3DQEJARYQc2FtbEBpYS5mb3J0aC5ncjAeFw0yMjAxMjExMjE0NTdaFw0zMjAxMTkxMjE0NTdaMIHXMQswCQYDVQQGEwJHUjEOMAwGA1UECAwFQ3JldGUxEjAQBgNVBAcMCUhl [...]
+ </ds:X509Data>
+ </ds:KeyInfo>
+ </md:KeyDescriptor>
+ <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://orp.ia.forth.gr/sp/module.php/saml/sp/saml2-logout.php/sp"/>
+ <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
+ <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://orp.ia.forth.gr/sp/module.php/saml/sp/saml2-acs.php/sp" index="0"/>
+ <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://orp.ia.forth.gr/sp/module.php/saml/sp/saml2-acs.php/sp" index="1"/>
+ <md:AttributeConsumingService index="0">
+ <md:ServiceName xml:lang="en">IA FORTH SP</md:ServiceName>
+ <md:ServiceName xml:lang="el">IA FORTH SP</md:ServiceName>
+ <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="eduPersonPrincipalName" isRequired="true"/>
+ <md:RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="mail" isRequired="false"/>
+ <md:RequestedAttribute Name="urn:oid:2.5.4.42" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="givenName" isRequired="false"/>
+ <md:RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="sn" isRequired="false"/>
+ <md:RequestedAttribute Name="urn:oid:2.5.4.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="o" isRequired="false"/>
+ <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="schacHomeOrganization" isRequired="false"/>
+ <md:RequestedAttribute Name="urn:oid:1.3.6.1.4.1.25178.1.2.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" FriendlyName="schacHomeOrganizationType" isRequired="false"/>
+ </md:AttributeConsumingService>
+ </md:SPSSODescriptor>
+ <md:Organization>
+ <md:OrganizationName xml:lang="en">Foundation for Research and Technology - Hellas (FORTH)</md:OrganizationName>
+ <md:OrganizationName xml:lang="el">Ίδρυμα Τεχνολογίας και Έρευνας - ΙΤΕ</md:OrganizationName>
+ <md:OrganizationDisplayName xml:lang="en">Foundation for Research and Technology - Hellas (FORTH)</md:OrganizationDisplayName>
+ <md:OrganizationDisplayName xml:lang="el">Ίδρυμα Τεχνολογίας και Έρευνας - ΙΤΕ</md:OrganizationDisplayName>
+ <md:OrganizationURL xml:lang="en">http://www.forth.gr/en</md:OrganizationURL>
+ <md:OrganizationURL xml:lang="el">http://www.forth.gr/el</md:OrganizationURL>
+ </md:Organization>
+ <md:ContactPerson contactType="support">
+ <md:GivenName>ORP</md:GivenName>
+ <md:SurName>Support</md:SurName>
+ <md:EmailAddress>mailto:orp at ia.forth.gr</md:EmailAddress>
+ </md:ContactPerson>
+ <md:ContactPerson contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
+ <md:GivenName>IA FORTH Security Response Team</md:GivenName>
+ <md:EmailAddress>mailto:security at ia.forth.gr</md:EmailAddress>
+ </md:ContactPerson>
+ <md:ContactPerson contactType="technical">
+ <md:GivenName>Giannis</md:GivenName>
+ <md:SurName>Kapetanakis</md:SurName>
+ <md:EmailAddress>mailto:saml at ia.forth.gr</md:EmailAddress>
+ </md:ContactPerson>
+ </md:EntityDescriptor>
+</md:EntitiesDescriptor>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list