From 2d02fcfbb482e3e1f4268c13199d98c6b4285a68 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Mon, 2 Sep 2013 16:10:00 +0000
Subject: [PATCH] Blacklist everything that is problematic on 2013-09-02 to
 keep the signing run peaceful.

---
 mdx/uk/blacklist.xml | 60 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)

diff --git a/mdx/uk/blacklist.xml b/mdx/uk/blacklist.xml
index 72d470c0..56dc4651 100644
--- a/mdx/uk/blacklist.xml
+++ b/mdx/uk/blacklist.xml
@@ -23,6 +23,66 @@
         reducing the noise involved in a signing run.
     -->
     <util:set id="importEntityBlacklist">
+        
+        <!--
+            Problems in ie_edugate metadata updated 2013-09-02.
+        -->
+        <!-- duplicated IdP entity for Dublin Institute of Technology -->
+        <value>https://idp.dit.ie/idp/shibboleth</value>
+        
+        <!--
+            Problems in int_edugain metadata updated 2013-09-02.
+        -->
+        <!-- URL-encoded Location attributes -->
+        <value>http://adfs.tue.nl/adfs/services/trust</value>
+        <!-- SAML 2.0 AttributeAuthority without appropriate AttributeService -->
+        <value>https://caroa.univasf.edu.br/shib-idp</value>
+        <!-- OrganizationDisplayName contains a line break -->
+        <value>https://cloudidp1.canarie.ca/idp/shibboleth</value>
+        <!-- Bad Logo URL, no encryption key -->
+        <value>https://engine.surfconext.nl/authentication/sp/metadata</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idemfero.units.it/idp/shibboleth</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idp.dir.garr.it/idp/shibboleth</value>
+        <!-- excludes SAML 2 transient -->
+        <value>https://idp.lrz.de/idp/shibboleth</value>
+        <!-- URL-encoded Location attributes -->
+        <value>https://idp.surfnet.nl</value>
+        <!-- Bad Logo URL -->
+        <value>https://idp.ujep.cz/idp/shibboleth</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idp.uniparthenope.it/idp/shibboleth</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idp.uniroma3.it/idp/shibboleth</value>
+        <!-- UIInfo in AttributeAuthorityDescriptor -->
+        <value>https://idp.uqam.ca/idp/shibboleth</value>
+        <!-- URL-encoded Location attributes -->
+        <value>https://login.terena.org/idp/saml2/idp/metadata.php</value>
+        <!-- Duplicate IdP display names -->
+        <value>https://lu-idp.lu.lv</value>
+        <value>https://lu-idp1.lu.lv</value>
+        <!-- simpleSAMLphp HoK issue -->
+        <value>https://monitor.eduroam.org/sp/module.php/saml/sp/metadata.php/default-sp</value>
+        <!-- excludes both name identifier formats -->
+        <value>https://services-federation.renater.fr/validation/ressource</value>
+        <!-- no POST support on SAML 1.1 SP -->
+        <value>https://sgw.garr.it/shibboleth</value>
+        <!-- excludes both name identifier formats -->
+        <value>https://sourcesup.cru.fr/shibboleth</value>
+        <!-- simpleSAMLphp HoK issue -->
+        <value>https://sp.upv.es/saml/module.php/saml/sp/metadata.php/upv-sp-saml</value>
+        <!-- non-https Locations, excludes transient, no AA key -->
+        <value>https://www.rediris.es/sir/aesiridp</value>
+        <!-- non-https Locations -->
+        <value>https://www.rediris.es/sir/rediristestidp</value>
+        <!-- non-https Locations, excludes transient, no AA key -->
+        <value>https://www.rediris.es/sir/umaidp</value>
+        <!-- bad Logo URL -->
+        <value>https://www2.eduid.cz/shibboleth</value>
+        <!-- unacceptable entityID -->
+        <value>urn:geant:edugain:component:be:aaieduhr:aaiedu.hr</value>
+        
     </util:set>
     
 </beans>