Add a channel for the Japanese GakuNin federation.

build.xml

@@ -1131,6 +1131,10 @@
         <CHANNEL.do channel="int_edugain" verb="testImport"/>
     </target>
 
+    <target name="flow.jp_gakunin.import">
+        <CHANNEL.import channel="jp_gakunin"/>
+    </target>
+
     <target name="flow.se_swamid.import">
         <CHANNEL.import channel="se_swamid"/>
     </target>

mdx/jp_gakunin/beans.xml

@@ -0,0 +1,61 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Common beans for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Fetch the production aggregate.
+    -->
+    <bean id="jp_gakunin_productionAggregate" class="net.shibboleth.metadata.dom.DomHttpSourceStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="jp_gakunin_productionAggregate"/>
+        <property name="parserPool" ref="parserPool"/>
+        <property name="sourceUrl" value="https://metadata.gakunin.nii.ac.jp/gakunin-metadata.xml"/>        
+    </bean>
+
+    <!--
+        Signing certificate.
+    -->
+    <bean id="jp_gakunin_signingCertificate" class="net.shibboleth.ext.spring.factory.X509CertificateFactoryBean"
+        lazy-init="true">
+        <property name="certificateFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/jp_gakunin/gakunin-signer-2010.cer"/>
+            </bean>
+        </property>
+    </bean>
+
+    <!--
+        Check signing signature.
+    -->
+    <bean id="jp_gakunin_checkSignature" class="net.shibboleth.metadata.dom.XMLSignatureValidationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="jp_gakunin_checkSignature"/>
+        <property name="verificationCertificate" ref="jp_gakunin_signingCertificate"/>
+    </bean>
+
+    <!--
+        Fetch and process the exported entities as a collection.
+    -->
+    <bean id="jp_gakunin_exportedEntities" class="net.shibboleth.metadata.pipeline.CompositeStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="jp_gakunin_exportedEntities"/>
+        <property name="composedStages">
+            <list>
+                <!-- no export aggregate; use the production one instead -->
+                <ref bean="jp_gakunin_productionAggregate"/>
+                <ref bean="jp_gakunin_checkSignature"/>
+
+                <!-- failure to validate signature is fatal -->
+                <ref bean="errorTerminatingFilter"/>
+
+                <ref bean="disassemble"/>
+
+                <ref bean="standardImportActions"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>

mdx/jp_gakunin/gakunin-signer-2010.cer

@@ -0,0 +1,25 @@
+-----BEGIN CERTIFICATE-----
+MIIETDCCAzSgAwIBAgIJAPH+7vRk/hRIMA0GCSqGSIb3DQEBBQUAMHIxCzAJBgNV
+BAYTAkpQMUEwPwYDVQQKEzhHYWt1TmluIC0gSmFwYW5lc2UgQWNhZGVtaWMgQWNj
+ZXNzIE1hbmFnZW1lbnQgRmVkZXJhdGlvbjEgMB4GA1UEAxMXR2FrdU5pbiBNZXRh
+ZGF0YSBTaWduZXIwHhcNMTAxMTI2MDE0MTUwWhcNMjAxMTI2MDE0MTUwWjByMQsw
+CQYDVQQGEwJKUDFBMD8GA1UEChM4R2FrdU5pbiAtIEphcGFuZXNlIEFjYWRlbWlj
+IEFjY2VzcyBNYW5hZ2VtZW50IEZlZGVyYXRpb24xIDAeBgNVBAMTF0dha3VOaW4g
+TWV0YWRhdGEgU2lnbmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
+89jEBYSmyJJMfZK6ekOTTD8jCJ26CArYXpPcScTweqKtLijX0MD57zTLDmEkrNpf
+bRjzVR9xxTnCrlWNF6JX6S+8xn2Lmc7T8cs7PGWIjjXlYrVgTR4kEDLoJ69DiAgL
+s/4f03+P8e2ZFhY9viG164lAXf7fpJqrSxs/INwTNhS6PRhAMMQHIAVFrIZyFcG+
+/WN6mJGYQTcFFQ+ndeY1wJPsKx2KbPf9YF37t/HGG3OwBzKPlV2UQ1roZ+q2s77+
+ZcvuTKf5gpJDA+KVHMP5LgVe98LZmIV63y4zGa/bFo/jmOyu41t966Gb2DO/Hkxt
+XjvgzTXdQN3PujdIUePtswIDAQABo4HkMIHhMB0GA1UdDgQWBBQlucSQzIQSI5O1
+DHBpAdyQzlZVxDCBpAYDVR0jBIGcMIGZgBQlucSQzIQSI5O1DHBpAdyQzlZVxKF2
+pHQwcjELMAkGA1UEBhMCSlAxQTA/BgNVBAoTOEdha3VOaW4gLSBKYXBhbmVzZSBB
+Y2FkZW1pYyBBY2Nlc3MgTWFuYWdlbWVudCBGZWRlcmF0aW9uMSAwHgYDVQQDExdH
+YWt1TmluIE1ldGFkYXRhIFNpZ25lcoIJAPH+7vRk/hRIMAwGA1UdEwQFMAMBAf8w
+CwYDVR0PBAQDAgKEMA0GCSqGSIb3DQEBBQUAA4IBAQCFUKVarIQkXZ+u/O/dB1v5
+8VJHzVazKA/KNkZWsc5QsVDhLFHYHcc8GJqgLmpWGavoWDDtxx8Xs23qmRWITkRE
+6h+sPvhMgyemLfwp6UHUei48QINdCq8nEMcZ31ueC4DbIOab9LkkwrXFRA+TrM3j
+XEbJelbrO47jJ8FpB1ya3rmuOm9CymQbdB2unGm8VWmQYPpD1tMNX3kBXnw0cL0y
+toqYjxKzDqzqBCtSRYBPSsP4TEoWkI8TCtDrWA8OeEKdCW9KQNbTG0tlgPSNwCx9
+uz/OhE5YcazVJWmlIg+UYpSQLzMTkGA73xxP7NVe3mIUWLcYEtdbC8Ip5OA2TXvA
+-----END CERTIFICATE-----

mdx/jp_gakunin/verbs.xml

@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Verb definitions for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Import commonly used beans.
+    -->
+    <import resource="../common-beans.xml"/>
+
+    <!--
+        Import channel-specific beans.
+    -->
+    <import resource="beans.xml"/>
+
+    <bean id="serializeImported" class="net.shibboleth.metadata.pipeline.SerializationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="serializeImported"/>
+        <property name="serializer" ref="serializer"/>
+        <property name="outputFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/jp_gakunin/imported.xml"/>
+            </bean>
+        </property>
+    </bean>
+
+    <bean id="import" class="net.shibboleth.metadata.pipeline.SimplePipeline"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="import"/>
+        <property name="stages">
+            <list>
+                <ref bean="jp_gakunin_exportedEntities"/>
+                <ref bean="standardImportTail"/>
+                <ref bean="serializeImported"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>