Add a channel for the Hungarian eduID/NIIF federation.

InCommon · Jun 27, 2011 · 3d82c54 · 3d82c54
1 parent c459bfa
commit 3d82c54
Show file tree

Hide file tree

Showing 4 changed files with 137 additions and 0 deletions.
diff --git a/build.xml b/build.xml
@@ -1151,6 +1151,10 @@
         <CHANNEL.import channel="fr_renater"/>
     </target>
 
+    <target name="flow.hu_eduid.import">
+        <CHANNEL.import channel="hu_eduid"/>
+    </target>
+
 	<target name="flow.ie_edugate.import">
         <CHANNEL.import channel="ie_edugate"/>
     </target>

diff --git a/mdx/hu_eduid/beans.xml b/mdx/hu_eduid/beans.xml
@@ -0,0 +1,61 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Common beans for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Fetch the production aggregate.
+    -->
+    <bean id="hu_eduid_productionAggregate" class="net.shibboleth.metadata.dom.DomHttpSourceStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="hu_eduid_productionAggregate"/>
+        <property name="parserPool" ref="parserPool"/>
+        <property name="sourceUrl" value="https://metadata.eduid.hu/metadata.xml"/>        
+    </bean>
+
+    <!--
+        Metadata signing certificate.
+    -->
+    <bean id="hu_eduid_signingCertificate" class="net.shibboleth.ext.spring.factory.X509CertificateFactoryBean"
+        lazy-init="true">
+        <property name="certificateFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/hu_eduid/href-metadata-signer-2010.crt"/>
+            </bean>
+        </property>
+    </bean>
+
+    <!--
+        Check the signature on a document.
+    -->
+    <bean id="hu_eduid_checkSignature" class="net.shibboleth.metadata.dom.XMLSignatureValidationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="hu_eduid_checkSignature"/>
+        <property name="verificationCertificate" ref="hu_eduid_signingCertificate"/>
+    </bean>
+
+    <!--
+        Fetch and process the exported entities as a collection.
+    -->
+    <bean id="hu_eduid_exportedEntities" class="net.shibboleth.metadata.pipeline.CompositeStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="hu_eduid_exportedEntities"/>
+        <property name="composedStages">
+            <list>
+                <!-- no export aggregate; use the production one instead -->
+                <ref bean="hu_eduid_productionAggregate"/>
+                <ref bean="hu_eduid_checkSignature"/>
+
+                <!-- failure to validate signature is fatal -->
+                <ref bean="errorTerminatingFilter"/>
+
+                <ref bean="disassemble"/>
+
+                <ref bean="standardImportActions"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>
diff --git a/mdx/hu_eduid/href-metadata-signer-2010.crt b/mdx/hu_eduid/href-metadata-signer-2010.crt
@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----
+MIIFOjCCBCKgAwIBAgICBFIwDQYJKoZIhvcNAQEFBQAwVTELMAkGA1UEBhMCSFUx
+DTALBgNVBAoTBE5JSUYxIDAeBgNVBAsTF0NlcnRpZmljYXRlIEF1dGhvcml0aWVz
+MRUwEwYDVQQDEwxOSUlGIFJvb3QgQ0EwHhcNMTAwNDMwMTEzNTE0WhcNMTEwNDMw
+MTEzNTE0WjCBhjELMAkGA1UEBhMCSFUxEDAOBgNVBAoTB05JSUYgQ0ExFzAVBgNV
+BAoTDk5JSUYgSW5zdGl0dXRlMQwwCgYDVQQLEwNBQUkxIjAgBgNVBAMTGUhSRUYg
+TWV0YWRhdGEgU2lnbmVyIDIwMTAxGjAYBgkqhkiG9w0BCQEWC2FhaUBuaWlmLmh1
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Nz7/LOH+ooA62ZEUVO
+jd1Bp0ZM1z8CqtzGDTfkCWbBaeBjOHRPISdBQWADUYjxvIlmszlvcI6cXGvk0XGt
+Dzr3scTu9hZ2U9+r2KpqKdhrh0+Aq+rkVLZSvXF5fyAg2j+3juajurDAQhpFU323
+E52QLnY0un22NIQcBqkDOJqQQgkNV5kPpschHDOpHnSj3E9Ebs1qqLr9F6WMsKso
+U5aMLID0qRF3tVDVg6X9YlWb5k6cfP6IoUE359HsKIGO4FgQHDKzcQD1wwb9gK+S
+NXjaa4vvjYeflm4sBYNvckvB4F1QMEUUDgMnVskI8JNadTaDrfb57vnFmnKcbWXo
+8wIDAQABo4IB4DCCAdwwEQYJYIZIAYb4QgEBBAQDAgZAMA4GA1UdDwEB/wQEAwIE
+8DAeBgNVHREEFzAVgRNhZGFtLmxhbnRvc0BuaWlmLmh1MIIBWQYDVR0fBIIBUDCC
+AUwwgbygW6BZpFcwVTELMAkGA1UEBhMCaHUxDTALBgNVBAoTBE5JSUYxIDAeBgNV
+BAsTF0NlcnRpZmljYXRlIEF1dGhvcml0aWVzMRUwEwYDVQQDEwxOSUlGIFJvb3Qg
+Q0GBAgDeolmkVzBVMQswCQYDVQQGEwJodTENMAsGA1UEChMETklJRjEgMB4GA1UE
+CxMXQ2VydGlmaWNhdGUgQXV0aG9yaXRpZXMxFTATBgNVBAMTDE5JSUYgUm9vdCBD
+QTCBiqApoCeGJWh0dHA6Ly93d3cuY2EubmlpZi5odS9uaWlmLWNhLWNybC5jcmyB
+AgDeolmkVzBVMQswCQYDVQQGEwJodTENMAsGA1UEChMETklJRjEgMB4GA1UECxMX
+Q2VydGlmaWNhdGUgQXV0aG9yaXRpZXMxFTATBgNVBAMTDE5JSUYgUm9vdCBDQTAf
+BgNVHSMEGDAWgBSMbiHica+gKqew5P68fqP9D6DjiDAZBgNVHSAEEjAQMA4GDCsG
+AQQB3QoBAQwBADANBgkqhkiG9w0BAQUFAAOCAQEAOySh42Cy0Na3XVe5VxnxTYMr
+rftDmXBg70WGvoVHV7G9IjXasCflqrgcdvYFYIsie3XNCUFyAFcv7m9v+XZzZwCV
+raMyku3VASuH52aR1QBuMVo3lp3oQeTv8HJ+Yq2g5tEg2P6ZWdnS3LsK2dqCbI35
+yaECmC0SeUnLNfyeUYpPpQQ0pO/VrzqxSTHDqvJhwrPOFtOJmkpFlKnrGDhX16Fx
+KE4+VQw8dw1NPz16eiY4CPf0KE9dMggs4VPp+DyuKIkarvIisA+iLXv8PyWaKjyj
+pUl5esFH29NbQLxQH/QJh/C0BHUOSewqlWi/BAzhdO+S3Fur5A6gBkdsRMImPg==
+-----END CERTIFICATE-----
+
diff --git a/mdx/hu_eduid/verbs.xml b/mdx/hu_eduid/verbs.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Verb definitions for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Import commonly used beans.
+    -->
+    <import resource="../common-beans.xml"/>
+
+    <!--
+        Import channel-specific beans.
+    -->
+    <import resource="beans.xml"/>
+
+    <bean id="serializeImported" class="net.shibboleth.metadata.pipeline.SerializationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="serializeImported"/>
+        <property name="serializer" ref="serializer"/>
+        <property name="outputFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/hu_eduid/imported.xml"/>
+            </bean>
+        </property>
+    </bean>
+
+    <bean id="import" class="net.shibboleth.metadata.pipeline.SimplePipeline"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="import"/>
+        <property name="stages">
+            <list>                
+                <ref bean="hu_eduid_exportedEntities"/>
+                <ref bean="standardImportTail"/>
+                <ref bean="serializeImported"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>