From 025c70ac7d133f577ef174d7ed5fa5fde61a08c2 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Wed, 23 Feb 2011 17:54:53 +0000
Subject: [PATCH] INTERNAL CHANGE Add some very preliminary and experimental
 download and checking support for the InCommon federation metadata.

---
 build.xml          | 58 ++++++++++++++++++++++++++++++++++++++++++++++
 build/incommon.pem | 28 ++++++++++++++++++++++
 2 files changed, 86 insertions(+)
 create mode 100644 build/incommon.pem

diff --git a/build.xml b/build.xml
index c55ea873..4a52be0f 100644
--- a/build.xml
+++ b/build.xml
@@ -866,6 +866,64 @@
 		</sequential>
 	</macrodef>
 	
+	<!--
+	    *************************************************
+	    ***                                           ***
+	    ***   I N C O M M O N   F E D E R A T I O N   ***
+	    ***                                           ***
+	    *************************************************
+	-->
+	
+	<property name="incommon.metadata.location"
+		value="http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml"/>
+	<property name="incommon.metadata.cert"
+	   value="incommon.pem"/>
+	
+    <macrodef name="XMLSECTOOL.VFY.incommon">
+        <attribute name="i"/><!-- input file, assumed to be in the XML directory -->
+        <sequential>
+            <XMLSECTOOL i="@{i}">
+                <args>
+                    <arg value="--verifySignature"/>
+                    <arg value="--certificate"/>
+                    <arg value="${build.dir}/${incommon.metadata.cert}"/>
+                    <!--
+                    <arg value="- -quiet"/>
+                    -->
+                </args>
+            </XMLSECTOOL>
+        </sequential>
+    </macrodef>
+
+	<target name="verify.incommon">
+        <echo>Verifying metadata held at ${incommon.metadata.location}</echo>
+        <delete file="${xml.dir}/temp.xml" quiet="true" verbose="false"/>
+        <get src="${incommon.metadata.location}" dest="${xml.dir}/temp.xml"/>
+        
+        <!--
+            Verify using metadatatool.
+        -->
+        <!-- <MDT.VFY.uk i="temp.xml"/> -->
+
+        <!--
+            Verify using xmlsectool.
+        -->
+        <XMLSECTOOL.VFY.incommon i="temp.xml"/>
+		
+		<!--
+		    Run UK checking rulesets.
+		-->
+        <CHECK i="${xml.dir}/temp.xml" s="check_imported.xsl"/>
+        
+        <!--
+            Delete the temporary file.
+        -->
+        <delete file="${xml.dir}/temp.xml" quiet="true" verbose="false"/>
+		
+        <echo>Verification completed.</echo>
+    </target>
+
+	
 	<!--
 		*******************************
 		***                         ***
diff --git a/build/incommon.pem b/build/incommon.pem
new file mode 100644
index 00000000..39f94c20
--- /dev/null
+++ b/build/incommon.pem
@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE-----
+MIIFqTCCBJGgAwIBAgICArowDQYJKoZIhvcNAQEFBQAwVjELMAkGA1UEBhMCVVMxHDAaBgNVBAoT
+E0luQ29tbW9uIEZlZGVyYXRpb24xKTAnBgNVBAMTIEluQ29tbW9uIENlcnRpZmljYXRpb24gQXV0
+aG9yaXR5MB4XDTEwMDUxOTEyNTgyOVoXDTEyMDUxOTEyNTgyOVowJzElMCMGA1UEAxMcZmVkb3Au
+aW5jb21tb25mZWRlcmF0aW9uLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANAo
+XZK5/nRuWY+S91CMPsXloDc5vGo8O/xcqkUNUow+C34NlgnZX4zq2BjZ1WTAk3yLaF00qYOK18R0
+LMpHjYmEbtvtNrjEvtaZwalo83TyRNKHfqvBG3bxOkoYpo8jZ9MkHxskCgjXWLnPu+TCB7GiDgBL
+Q2VEk/UneKHlNc0Y1drBr1HfiRR73lAIUXNG/iRGXyBLqvyyFPasZv/oBWmsJZqI2T8jlmdSZbMG
+66yWGMp9dKoJyb44fYGVlyo5j8arxyiXAEz4QIdoFhmm1k1wSQnJDHtYaxwpf72wywps9P6GLqGk
+g8z+sxPWEgP8QqZWhwNJqAtVbNh+TDkBpXsCAwEAAaOCAq4wggKqMA4GA1UdDwEB/wQEAwIFoDAM
+BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU5ij9
+YLU5zQ6K75kPgVpyQ2N/lPswfgYDVR0jBHcwdYAUky3IYRitY+ObZbOd3Y2TuufKY0WhWqRYMFYx
+CzAJBgNVBAYTAlVTMRwwGgYDVQQKExNJbkNvbW1vbiBGZWRlcmF0aW9uMSkwJwYDVQQDEyBJbkNv
+bW1vbiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eYIBADCBsgYIKwYBBQUHAQEEgaUwgaIwTwYIKwYB
+BQUHMAKGQ2h0dHA6Ly9pbmNvbW1vbmNhMS5pbmNvbW1vbmZlZGVyYXRpb24ub3JnL2JyaWRnZS9j
+ZXJ0cy9jYS1jZXJ0cy5wN2IwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9pbmNvbW1vbmNhMi5pbmNvbW1v
+bmZlZGVyYXRpb24ub3JnL2JyaWRnZS9jZXJ0cy9jYS1jZXJ0cy5wN2IwgY0GA1UdHwSBhTCBgjA/
+oD2gO4Y5aHR0cDovL2luY29tbW9uY3JsMS5pbmNvbW1vbmZlZGVyYXRpb24ub3JnL2NybC9lZWNy
+bHMuY3JsMD+gPaA7hjlodHRwOi8vaW5jb21tb25jcmwyLmluY29tbW9uZmVkZXJhdGlvbi5vcmcv
+Y3JsL2VlY3Jscy5jcmwwXgYDVR0gBFcwVTBTBgsrBgEEAa4jAQQBATBEMEIGCCsGAQUFBwIBFjZo
+dHRwOi8vaW5jb21tb25jYS5pbmNvbW1vbmZlZGVyYXRpb24ub3JnL3ByYWN0aWNlcy5wZGYwJwYD
+VR0RBCAwHoIcZmVkb3AuaW5jb21tb25mZWRlcmF0aW9uLm9yZzANBgkqhkiG9w0BAQUFAAOCAQEA
+RtypKF+3/5z48gZktwIXEUwW/J1ROYvPTvMrtuVyzroBCGp4HfNLuMm6F8BVSrTHqVGLFGrGM8md
+zU+FQdsM/x0W/cc0A4mHLwM4XDDVcH6nepwLZX9H1AfaxYgIGrJL+l8JDWtmEn/ktSij4y4HlA2q
+5kH+UyEwxFuqEUEd2EnL8agjjxiacJYeTon23pbWGe20QTPq45YM5q1G44RCYIhljSYth4FX9vBw
+7n4jH21HpsHTk2gDOkBwXXgiebknnAnPI2jz5mNgEAabhGkDrnGIttEEREcWlOuLdgc8uDUjHO/X
+Dsw27l4YFl6/OG92XPlCOYVQCqSmp0OdTViV9A==
+-----END CERTIFICATE-----