Add a check against the use of md:EncryptionMethod within md:KeyDescr…

…iptor. While valid, this causes problems for OpenSAML-C 2.0, used by early Shibboleth 2.x SPs.
InCommon · Feb 15, 2011 · 38e628a · 38e628a
1 parent 58a1bc3
commit 38e628a
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/build/check_shibboleth.xsl b/build/check_shibboleth.xsl
@@ -159,4 +159,16 @@
 		</xsl:call-template>
 	</xsl:template>
 
+
+	<!--
+		Use of EncryptionMethod within KeyDescriptor causes metadata loading problems
+		for OpenSAML-C 2.0.
+	-->
+	<xsl:template match="md:KeyDescriptor/md:EncryptionMethod">
+		<xsl:call-template name="fatal">
+			<xsl:with-param name="m">KeyDescriptor contains EncryptionMethod: OpenSAML-C 2.0 problem</xsl:with-param>
+		</xsl:call-template>
+	</xsl:template>
+
+
 </xsl:stylesheet>