metadata x509 certificate lines terminated with 
 ?

[Baron Fujimoto]

We are working with an SP who is providing metadata where the character
entity "
" (carriage return, I believe) has been appended to each line
of their x509 certificates . E.g.:

    <ds:X509Data>

 <ds:X509Certificate>MIIGXTCCBUWgAwIBAgIQCLgQc9Z8Mn06Q0tiGbaLyjANBgkqhkiG9w0BAQsFADBZMQswCQYDVQQG
&#xd;
EwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypEaWdpQ2VydCBHbG9iYWwgRzIg
&#xd;
...
3H8TzSiVX+JruLLaUdWCtTqKDYyVJBxNNKV/cVzLqcXaLIUq3LwqrSLfh1axuYW64VT1SHe2MAsM
&#xd;
U7U1sUyCVwFp2Z7D3xnz+erklZPsBxecF7mTebgi9XUUUJDiEA==</ds:X509Certificate>
    <ds:X509Data>

The IdP fails to parse this. Is this actually valid SAML for the metadata?
I couldn't find a standards reference that answered this definitively. The
SP is claiming that, "Since we include the "&#xd" characters to show a
break in the metadata information, we will not be able to remove these
characters from the XML file" and advises, "If Shibboleth cannot parse the
metadata correctly..." we need to download and manually fix the metadata
ourselves. If their metadata is in fact not standards compliant, I would
very much appreciate any references I could provide to the SP to
demonstrate that.

-- 
Baron Fujimoto <baron at hawaii.edu> :: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220323/be3e6e35/attachment.htm>