From 3334c90a2532e525c807a042868b4f3b8bc0666d Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Tue, 15 Mar 2011 09:00:49 +0000
Subject: [PATCH] INTERNAL CHANGE Add some very preliminary and experimental
 download and checking support for the eduGAIN pilot metadata.

---
 build.xml                       | 53 +++++++++++++++++++++++++++++++++
 feds/edugain/edugain-signer.crt | 15 ++++++++++
 2 files changed, 68 insertions(+)
 create mode 100644 feds/edugain/edugain-signer.crt

diff --git a/build.xml b/build.xml
index 5705dc70..778ac4d2 100644
--- a/build.xml
+++ b/build.xml
@@ -1034,6 +1034,59 @@
     </target>
 
 	
+	<!--
+	    *************************
+	    ***                   ***
+	    ***   E D U G A I N   ***
+	    ***                   ***
+	    *************************
+	-->
+	
+	<property name="edugain.dir" value="${feds.dir}/edugain"/>
+	<property name="edugain.metadata.location"
+        value="http://mds.edugain.org/"/>
+    <property name="edugain.metadata.cert"
+       value="${edugain.dir}/edugain-signer.crt"/>
+
+    <macrodef name="XMLSECTOOL.VFY.edugain">
+        <attribute name="i"/><!-- input file, assumed to be in the XML directory -->
+        <sequential>
+            <XMLSECTOOL i="@{i}">
+                <args>
+                    <arg value="--verifySignature"/>
+                    <arg value="--certificate"/>
+                    <arg value="${edugate.metadata.cert}"/>
+                    <!--
+                    <arg value="- -quiet"/>
+                    -->
+                </args>
+            </XMLSECTOOL>
+        </sequential>
+    </macrodef>
+
+	<target name="verify.edugain">
+        <echo>Verifying metadata held at ${edugain.metadata.location}</echo>
+        <delete file="${xml.dir}/temp.xml" quiet="true" verbose="false"/>
+        <get src="${edugain.metadata.location}" dest="${xml.dir}/temp.xml"/>
+        
+        <!--
+            Verify using xmlsectool.
+        -->
+        <XMLSECTOOL.VFY.edugain i="temp.xml"/>
+        
+        <!--
+            Run UK checking rulesets.
+        -->
+        <CHECK i="${xml.dir}/temp.xml" s="check_imported.xsl"/>
+        
+        <!--
+            Delete the temporary file.
+        -->
+        <delete file="${xml.dir}/temp.xml" quiet="true" verbose="false"/>
+        
+        <echo>Verification completed.</echo>
+	</target>
+	
 	<!--
 		*******************************
 		***                         ***
diff --git a/feds/edugain/edugain-signer.crt b/feds/edugain/edugain-signer.crt
new file mode 100644
index 00000000..c6c6043b
--- /dev/null
+++ b/feds/edugain/edugain-signer.crt
@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE-----
+MIIC1DCCAbygAwIBAgIETCJV1DANBgkqhkiG9w0BAQUFADAsMQ4wDAYDVQQKEwVHRUFOVDEaMBgG
+A1UEAxMRZWR1R0FJTiBTaWduZXIgQ0EwHhcNMTAwNjIzMTg0MzMyWhcNMTQwODAxMTg0MzMyWjAs
+MQ4wDAYDVQQKEwVHRUFOVDEaMBgGA1UEAxMRZWR1R0FJTiBTaWduZXIgQ0EwggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQCRfl1zhkaFveJvJtS03bRIO3k77q2s5m+c6sQ83j71rIad+vGC
+O29S4JHBXHI/U57yNbNLgoKzl0MI4WQrs4KT/y+LPMFB9M0lNrALQd/op6PNc7CWKMN1yV8V/L74
+/vapRlb90gPVJABHmoAfQmjyMXLW38KLwzK1qEpKUIxPBfQMBawmh0gC2T5ndZndcMPpgsMXyG2A
+Z4QGSOt4tgpspjTSRY++X+gi9WUuWzsEHHdFhCR9UYQ6+1glMVheJjVmoD0b9V/KQ0BF/1zry2jf
+WlchFeILlWbWgiWsIBA4BPNHqFW42qGgUr9DI3FzRLHXqF2N2f592tzcTeDZ11ejAgMBAAEwDQYJ
+KoZIhvcNAQEFBQADggEBAGC8iCKBUzmNIhikaCImp8WIMoI9VMYf/iBGcovaujRW85BmVfE0qj2y
+G2BfuA8RkxX7wayvb6znA7HSuQHpdVoI6poPbaW5ynZy35G3pzKs7dyZo6oGivE1Cj7PqJHXLICJ
+in3pKWGfHLkkYa64B32pXy7t42Rlvn2uog5MEYCgo4jnfhxnw0iPFJTHEy3x/PJ5Yxe5o/fDIUXt
+bIb0R0Z6Tym34YsUQQvmT11vfPPsFVc6Nkda0xo2DBxaPfw3ieTojimmnToPLFJL9DEEWKSSrIZQ
+YYrop0ftnQRhkFiu2TMYXiIiwKgLXKz7VybtcIMjt/tClNsDWTlIxwwFnNo=
+-----END CERTIFICATE-----