From 5679c2e1c52c2ff84187afd645864d74f3ddac27 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Wed, 2 Jun 2010 08:06:52 +0000
Subject: [PATCH] Flag XML comments appearing inside X509Certificate elements. 
 These cause problems for (at least) Shibboleth 1.3f, but probably other
 software as well.

---
 build/check_shibboleth.xsl | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/build/check_shibboleth.xsl b/build/check_shibboleth.xsl
index c3b78f8d..3f997aff 100644
--- a/build/check_shibboleth.xsl
+++ b/build/check_shibboleth.xsl
@@ -149,4 +149,14 @@
 	</xsl:template>
 	
 
+	<!--
+		The Shibboleth 1.3f SP, probably along with other software, has
+		problems with comments inside certificate representations.
+	-->
+	<xsl:template match="ds:X509Certificate[comment()]">
+		<xsl:call-template name="fatal">
+			<xsl:with-param name="m">X509Certificate contains XML comment</xsl:with-param>
+		</xsl:call-template>
+	</xsl:template>
+	
 </xsl:stylesheet>