Blacklist everything that is problematic on 2013-09-02 to keep the si…

…gning run peaceful.
InCommon · Sep 2, 2013 · 2d02fcf · 2d02fcf
1 parent de9bfbe
commit 2d02fcf
Showing 1 changed file with 60 additions and 0 deletions.
diff --git a/mdx/uk/blacklist.xml b/mdx/uk/blacklist.xml
@@ -23,6 +23,66 @@
         reducing the noise involved in a signing run.
     -->
     <util:set id="importEntityBlacklist">
+
+        <!--
+            Problems in ie_edugate metadata updated 2013-09-02.
+        -->
+        <!-- duplicated IdP entity for Dublin Institute of Technology -->
+        <value>https://idp.dit.ie/idp/shibboleth</value>
+
+        <!--
+            Problems in int_edugain metadata updated 2013-09-02.
+        -->
+        <!-- URL-encoded Location attributes -->
+        <value>http://adfs.tue.nl/adfs/services/trust</value>
+        <!-- SAML 2.0 AttributeAuthority without appropriate AttributeService -->
+        <value>https://caroa.univasf.edu.br/shib-idp</value>
+        <!-- OrganizationDisplayName contains a line break -->
+        <value>https://cloudidp1.canarie.ca/idp/shibboleth</value>
+        <!-- Bad Logo URL, no encryption key -->
+        <value>https://engine.surfconext.nl/authentication/sp/metadata</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idemfero.units.it/idp/shibboleth</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idp.dir.garr.it/idp/shibboleth</value>
+        <!-- excludes SAML 2 transient -->
+        <value>https://idp.lrz.de/idp/shibboleth</value>
+        <!-- URL-encoded Location attributes -->
+        <value>https://idp.surfnet.nl</value>
+        <!-- Bad Logo URL -->
+        <value>https://idp.ujep.cz/idp/shibboleth</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idp.uniparthenope.it/idp/shibboleth</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idp.uniroma3.it/idp/shibboleth</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idp.uqam.ca/idp/shibboleth</value>
+        <!-- URL-encoded Location attributes -->
+        <value>https://login.terena.org/idp/saml2/idp/metadata.php</value>
+        <!-- Duplicate IdP display names -->
+        <value>https://lu-idp.lu.lv</value>
+        <value>https://lu-idp1.lu.lv</value>
+        <!-- simpleSAMLphp HoK issue -->
+        <value>https://monitor.eduroam.org/sp/module.php/saml/sp/metadata.php/default-sp</value>
+        <!-- excludes both name identifier formats -->
+        <value>https://services-federation.renater.fr/validation/ressource</value>
+        <!-- no POST support on SAML 1.1 SP -->
+        <value>https://sgw.garr.it/shibboleth</value>
+        <!-- excludes both name identifier formats -->
+        <value>https://sourcesup.cru.fr/shibboleth</value>
+        <!-- simpleSAMLphp HoK issue -->
+        <value>https://sp.upv.es/saml/module.php/saml/sp/metadata.php/upv-sp-saml</value>
+        <!-- non-https Locations, excludes transient, no AA key -->
+        <value>https://www.rediris.es/sir/aesiridp</value>
+        <!-- non-https Locations -->
+        <value>https://www.rediris.es/sir/rediristestidp</value>
+        <!-- non-https Locations, excludes transient, no AA key -->
+        <value>https://www.rediris.es/sir/umaidp</value>
+        <!-- bad Logo URL -->
+        <value>https://www2.eduid.cz/shibboleth</value>
+        <!-- unacceptable entityID -->
+        <value>urn:geant:edugain:component:be:aaieduhr:aaiedu.hr</value>
+
     </util:set>
 
 </beans>