From 3be8c0241c4cd88360bd942738a1ab9dc1c89dd4 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Tue, 1 Oct 2013 16:57:29 +0000
Subject: [PATCH] Validate UK-registered RegistrationPolicy values against
 previously used document URIs.

---
 mdx/uk/beans.xml          | 14 ++++++++++++++
 mdx/uk/check_uk_mdrps.xsl | 36 ++++++++++++++++++++++++++++++++++++
 mdx/uk/verbs.xml          |  1 +
 3 files changed, 51 insertions(+)
 create mode 100644 mdx/uk/check_uk_mdrps.xsl

diff --git a/mdx/uk/beans.xml b/mdx/uk/beans.xml
index eaa7a218..0592f43a 100644
--- a/mdx/uk/beans.xml
+++ b/mdx/uk/beans.xml
@@ -253,6 +253,19 @@
     </bean>
     
     
+    <!--
+        check_uk_mdrps
+    -->
+    <bean id="check_uk_mdrps" parent="XSLValidationStage"
+        p:id="check_uk_mdrps">
+        <property name="xslResource">
+            <bean parent="FilesystemResource">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/uk/check_uk_mdrps.xsl"/>
+            </bean>
+        </property>
+    </bean>
+    
+    
     <!--
         check_uk_urlenc
     -->
@@ -388,6 +401,7 @@
                 <ref bean="checkSchemas"/>
                 <ref bean="CHECK_std"/>
                 <ref bean="check_ukreg"/>
+                <ref bean="check_uk_mdrps"/>
                 <ref bean="check_uk_urlenc"/>
                 <ref bean="mdui_dn_en_present"/>
                 <ref bean="mdui_dn_en_match"/>
diff --git a/mdx/uk/check_uk_mdrps.xsl b/mdx/uk/check_uk_mdrps.xsl
new file mode 100644
index 00000000..72ac36d3
--- /dev/null
+++ b/mdx/uk/check_uk_mdrps.xsl
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+	check_uk_mdrps.xsl
+	
+    UKf-specific check for appropriate RegistrationPolicy values.
+	
+	Author: Ian A. Young <ian@iay.org.uk>
+
+-->
+<xsl:stylesheet version="1.0"
+	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+	xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+	xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi"
+	xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
+
+	<!--
+		Common support functions.
+	-->
+	<xsl:import href="../_rules/check_framework.xsl"/>
+
+
+	<xsl:template match="mdrpi:RegistrationInfo[@registrationAuthority='http://ukfederation.org.uk']
+		/mdrpi:RegistrationPolicy
+			[.!='http://ukfederation.org.uk/doc/mdrps-20130902']
+		">
+		<xsl:call-template name="error">
+			<xsl:with-param name="m">
+				<xsl:text>invalid RegistrationPolicy value </xsl:text>
+				<xsl:value-of select="."/>
+			</xsl:with-param>
+		</xsl:call-template>
+	</xsl:template>
+	
+	
+</xsl:stylesheet>
diff --git a/mdx/uk/verbs.xml b/mdx/uk/verbs.xml
index c33f66eb..d196fd07 100644
--- a/mdx/uk/verbs.xml
+++ b/mdx/uk/verbs.xml
@@ -296,6 +296,7 @@
                 <ref bean="check_shibboleth"/>
                 <ref bean="check_uk_trust"/>
                 
+                <ref bean="check_uk_mdrps"/>
                 <ref bean="check_uk_urlenc"/>
                 <ref bean="check_future"/>
                 <ref bean="check_imported"/>