Matadata aggregator , federation named groupID for filters

[jehan.procaccia at tem-tsp.eu]

yes it helps and works after moving  beans (cache and validUntil)  below 
createEntitiesDescriptor

thanks.

alhtough the result seems good [1] , there's a warning in the execution 
of the process [2] , related to /<ref bean="signMetadata"/>/, when I 
remove that stage the warning deseapears, but the signature too  of 
course! I can use xmlsectool to sign the aggregate afterwards, but 
that's less fluent .

have you an explanation about that warning ?

/[root at fed aggregator-cli]# ./mda.sh ../config-imt-fededs-vuntil.xml main
INFO  - Pipeline 'main' execution starting at Thu May 05 20:05:33 
GMT+01:00 2022
May 05, 2022 8:05:34 PM com.sun.org.slf4j.internal.Logger warn
WARNING: The input bytes to the digest operation are null. This may be 
due to a problem with the Reference URI or its Transforms.
INFO  - Pipeline 'main' execution completed at Thu May 05 20:05:34 
GMT+01:00 2022; run time 0.837 seconds/

[2]

/<?xml version="1.0" encoding="UTF-8" 
standalone="no"?><md:EntitiesDescriptor 
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" 
ID="_bead3a18-aa3a-4b1f-992c-002a6ae9cc52" Name="IMT-FR-Fededs" 
cacheDuration="P0Y0M1DT0H0M0.000S" 
validUntil="2022-07-06T19:05:33.807Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#_bead3a18-aa3a-4b1f-992c-002a6ae9cc52"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>afOXMXxI3Yew2gOXDMP9hSaIbeqlrOnqiAIV2Gajo7A=</DigestValue></Reference></SignedInfo><SignatureValue>BbCyIdagw/58D7vKSiMfubKs41/kplPNVa0VD33gl19HwhFTI9lqXn3PEhs/8S+yGgsg2czkMA4c
/

/..../

Le 05/05/2022 à 15:04, Ian Young a écrit :
>
> In a pipeline, a collection of items is passed to each listed stage in 
> turn. In your pipeline, you collect the entities and then apply the 
> cacheDuration and validUntil stages, then a stage to collect those 
> into an EntitiesDescriptor. You're asking those two stages to operate 
> on the individual entities rather than on the EntitiesDescriptor.
>
> If you want those two stages to act on the EntitiesDescriptor rather 
> than the individual entities, you need to move them down the pipeline 
> until after the entities have been combined into an EntitiesDescriptor:
>
>> /        <ref bean="createEntitiesDescriptor"/>
>> /
>>
>> /*     <ref bean="addCacheDuration"/>**
>> **                <ref bean="addValidUntil"/>*
>> /
>>
> Hope that helps,
>
>     -- Ian
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220505/46b9c976/attachment.htm>