<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>yes it helps and works after moving beans (cache and
validUntil) below createEntitiesDescriptor</p>
<p>thanks.</p>
<p>alhtough the result seems good [1] , there's a warning in the
execution of the process [2] , related to <i><ref
bean="signMetadata"/></i>, when I remove that stage the
warning deseapears, but the signature too of course! I can use
xmlsectool to sign the aggregate afterwards, but that's less
fluent .</p>
<p>have you an explanation about that warning ? <br>
</p>
<p><i><font size="2">[root@fed aggregator-cli]# ./mda.sh
../config-imt-fededs-vuntil.xml main<br>
INFO - Pipeline 'main' execution starting at Thu May 05
20:05:33 GMT+01:00 2022<br>
May 05, 2022 8:05:34 PM com.sun.org.slf4j.internal.Logger warn<br>
WARNING: The input bytes to the digest operation are null.
This may be due to a problem with the Reference URI or its
Transforms.<br>
INFO - Pipeline 'main' execution completed at Thu May 05
20:05:34 GMT+01:00 2022; run time 0.837 seconds</font></i><br>
</p>
<p>[2]<br>
</p>
<p><i><font size="2"><?xml version="1.0" encoding="UTF-8"
standalone="no"?><md:EntitiesDescriptor
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
ID="_bead3a18-aa3a-4b1f-992c-002a6ae9cc52"
Name="IMT-FR-Fededs" cacheDuration="P0Y0M1DT0H0M0.000S"
validUntil="2022-07-06T19:05:33.807Z"><Signature
xmlns=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#">"http://www.w3.org/2000/09/xmldsig#"</a>><SignedInfo><CanonicalizationMethod
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/10/xml-exc-c14n#">"http://www.w3.org/2001/10/xml-exc-c14n#"</a>/><SignatureMethod
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256">"http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"</a>/><Reference
URI="#_bead3a18-aa3a-4b1f-992c-002a6ae9cc52"><Transforms><Transform
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2000/09/xmldsig#enveloped-signature">"http://www.w3.org/2000/09/xmldsig#enveloped-signature"</a>/><Transform
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/10/xml-exc-c14n#">"http://www.w3.org/2001/10/xml-exc-c14n#"</a>/></Transforms><DigestMethod
Algorithm=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/04/xmlenc#sha256">"http://www.w3.org/2001/04/xmlenc#sha256"</a>/><DigestValue>afOXMXxI3Yew2gOXDMP9hSaIbeqlrOnqiAIV2Gajo7A=</DigestValue></Reference></SignedInfo><SignatureValue>BbCyIdagw/58D7vKSiMfubKs41/kplPNVa0VD33gl19HwhFTI9lqXn3PEhs/8S+yGgsg2czkMA4c </font></i></p>
<p><i><font size="2">....</font></i><br>
</p>
<div class="moz-cite-prefix">Le 05/05/2022 à 15:04, Ian Young a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:A06161F9-6635-45CA-AC90-4619B5A8D686@iay.org.uk">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<br>
<div>
<div>In a pipeline, a collection of items is passed to each
listed stage in turn. In your pipeline, you collect the
entities and then apply the cacheDuration and validUntil
stages, then a stage to collect those into an
EntitiesDescriptor. You're asking those two stages to operate
on the individual entities rather than on the
EntitiesDescriptor.</div>
<div><br class="">
</div>
<div>If you want those two stages to act on the
EntitiesDescriptor rather than the individual entities, you
need to move them down the pipeline until after the entities
have been combined into an EntitiesDescriptor:</div>
<div><br class="">
</div>
<div>
<div>
<div>
<blockquote type="cite" class="">
<p class=""><i class=""><font class="" size="2">
<ref
bean="createEntitiesDescriptor"/><br class="">
</font></i></p>
</blockquote>
</div>
</div>
<blockquote type="cite" class="">
<p class=""><i class=""><font class="" size="2"> <b
class=""> <ref bean="addCacheDuration"/></b><b
class=""><br class="">
</b><b class=""> <ref
bean="addValidUntil"/></b><br class="">
</font></i></p>
</blockquote>
</div>
<div>Hope that helps,</div>
<div><br class="">
</div>
</div>
<div class=""><span class="Apple-style-span"
style="border-collapse: separate; font-variant-ligatures:
normal; font-variant-east-asian: normal;
font-variant-position: normal; font-weight: normal;
line-height: normal; border-spacing: 0px;
-webkit-text-decorations-in-effect: none;">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space;
-webkit-line-break: after-white-space;" class=""><span
class="Apple-style-span" style="border-collapse: separate;
color: rgb(0, 0, 0); font-family: Helvetica; font-size:
12px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; line-height:
normal; orphans: 2; text-indent: 0px; text-transform:
none; white-space: normal; widows: 2; word-spacing: 0px;
border-spacing: 0px; -webkit-text-decorations-in-effect:
none; -webkit-text-stroke-width: 0px;">
<div class=""> -- Ian<br class="">
</div>
<div class=""><span class="Apple-style-span"
style="font-size: medium;"><br class="">
</span></div>
</span></div>
</span><br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</blockquote>
</body>
</html>