From 4288c84f8b4a76ad06e362cd15094d36873e5773 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Fri, 24 Jun 2011 17:11:22 +0000
Subject: [PATCH] Add a channel for the Japanese GakuNin federation.

---
 build.xml                              |  4 ++
 mdx/jp_gakunin/beans.xml               | 61 ++++++++++++++++++++++++++
 mdx/jp_gakunin/gakunin-signer-2010.cer | 25 +++++++++++
 mdx/jp_gakunin/verbs.xml               | 41 +++++++++++++++++
 4 files changed, 131 insertions(+)
 create mode 100644 mdx/jp_gakunin/beans.xml
 create mode 100644 mdx/jp_gakunin/gakunin-signer-2010.cer
 create mode 100644 mdx/jp_gakunin/verbs.xml

diff --git a/build.xml b/build.xml
index 925e6c15..6989d579 100644
--- a/build.xml
+++ b/build.xml
@@ -1131,6 +1131,10 @@
         <CHANNEL.do channel="int_edugain" verb="testImport"/>
     </target>
     
+    <target name="flow.jp_gakunin.import">
+        <CHANNEL.import channel="jp_gakunin"/>
+    </target>
+    
     <target name="flow.se_swamid.import">
         <CHANNEL.import channel="se_swamid"/>
     </target>
diff --git a/mdx/jp_gakunin/beans.xml b/mdx/jp_gakunin/beans.xml
new file mode 100644
index 00000000..ffe92c56
--- /dev/null
+++ b/mdx/jp_gakunin/beans.xml
@@ -0,0 +1,61 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Common beans for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Fetch the production aggregate.
+    -->
+    <bean id="jp_gakunin_productionAggregate" class="net.shibboleth.metadata.dom.DomHttpSourceStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="jp_gakunin_productionAggregate"/>
+        <property name="parserPool" ref="parserPool"/>
+        <property name="sourceUrl" value="https://metadata.gakunin.nii.ac.jp/gakunin-metadata.xml"/>        
+    </bean>
+    
+    <!--
+        Signing certificate.
+    -->
+    <bean id="jp_gakunin_signingCertificate" class="net.shibboleth.ext.spring.factory.X509CertificateFactoryBean"
+        lazy-init="true">
+        <property name="certificateFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/jp_gakunin/gakunin-signer-2010.cer"/>
+            </bean>
+        </property>
+    </bean>
+    
+    <!--
+        Check signing signature.
+    -->
+    <bean id="jp_gakunin_checkSignature" class="net.shibboleth.metadata.dom.XMLSignatureValidationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="jp_gakunin_checkSignature"/>
+        <property name="verificationCertificate" ref="jp_gakunin_signingCertificate"/>
+    </bean>
+    
+    <!--
+        Fetch and process the exported entities as a collection.
+    -->
+    <bean id="jp_gakunin_exportedEntities" class="net.shibboleth.metadata.pipeline.CompositeStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="jp_gakunin_exportedEntities"/>
+        <property name="composedStages">
+            <list>
+                <!-- no export aggregate; use the production one instead -->
+                <ref bean="jp_gakunin_productionAggregate"/>
+                <ref bean="jp_gakunin_checkSignature"/>
+                
+                <!-- failure to validate signature is fatal -->
+                <ref bean="errorTerminatingFilter"/>
+                
+                <ref bean="disassemble"/>
+                
+                <ref bean="standardImportActions"/>
+            </list>
+        </property>
+    </bean>
+    
+</beans>
diff --git a/mdx/jp_gakunin/gakunin-signer-2010.cer b/mdx/jp_gakunin/gakunin-signer-2010.cer
new file mode 100644
index 00000000..4a0a4561
--- /dev/null
+++ b/mdx/jp_gakunin/gakunin-signer-2010.cer
@@ -0,0 +1,25 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
diff --git a/mdx/jp_gakunin/verbs.xml b/mdx/jp_gakunin/verbs.xml
new file mode 100644
index 00000000..e5e55141
--- /dev/null
+++ b/mdx/jp_gakunin/verbs.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Verb definitions for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Import commonly used beans.
+    -->
+    <import resource="../common-beans.xml"/>
+        
+    <!--
+        Import channel-specific beans.
+    -->
+    <import resource="beans.xml"/>
+    
+    <bean id="serializeImported" class="net.shibboleth.metadata.pipeline.SerializationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="serializeImported"/>
+        <property name="serializer" ref="serializer"/>
+        <property name="outputFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/jp_gakunin/imported.xml"/>
+            </bean>
+        </property>
+    </bean>
+    
+    <bean id="import" class="net.shibboleth.metadata.pipeline.SimplePipeline"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="import"/>
+        <property name="stages">
+            <list>
+                <ref bean="jp_gakunin_exportedEntities"/>
+                <ref bean="standardImportTail"/>
+                <ref bean="serializeImported"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>