Add a channel for the Italian IDEM federation.

InCommon · Jun 28, 2011 · 664dda2 · 664dda2
1 parent 0c31fd0
commit 664dda2
Show file tree

Hide file tree

Showing 3 changed files with 161 additions and 0 deletions.
diff --git a/mdx/it_idem/beans.xml b/mdx/it_idem/beans.xml
@@ -0,0 +1,61 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Common beans for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Fetch the production aggregate.
+    -->
+    <bean id="it_idem_productionAggregate" class="net.shibboleth.metadata.dom.DomHttpSourceStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="it_idem_productionAggregate"/>
+        <property name="parserPool" ref="parserPool"/>
+        <property name="sourceUrl" value="https://www.idem.garr.it/docs/conf/signed-metadata.xml"/>        
+    </bean>
+
+    <!--
+        Signing certificate.
+    -->
+    <bean id="it_idem_signingCertificate" class="net.shibboleth.ext.spring.factory.X509CertificateFactoryBean"
+        lazy-init="true">
+        <property name="certificateFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/it_idem/signer-bundle.pem"/>
+            </bean>
+        </property>
+    </bean>
+
+    <!--
+        Check signing signature.
+    -->
+    <bean id="it_idem_checkSignature" class="net.shibboleth.metadata.dom.XMLSignatureValidationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="it_idem_checkSignature"/>
+        <property name="verificationCertificate" ref="it_idem_signingCertificate"/>
+    </bean>
+
+    <!--
+        Fetch and process the exported entities as a collection.
+    -->
+    <bean id="it_idem_exportedEntities" class="net.shibboleth.metadata.pipeline.CompositeStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="it_idem_exportedEntities"/>
+        <property name="composedStages">
+            <list>
+                <!-- no export aggregate; use the production one instead -->
+                <ref bean="it_idem_productionAggregate"/>
+                <ref bean="it_idem_checkSignature"/>
+
+                <!-- failure to validate signature is fatal -->
+                <ref bean="errorTerminatingFilter"/>
+
+                <ref bean="disassemble"/>
+
+                <ref bean="standardImportActions"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>
diff --git a/mdx/it_idem/signer-bundle.pem b/mdx/it_idem/signer-bundle.pem
@@ -0,0 +1,48 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/mdx/it_idem/verbs.xml b/mdx/it_idem/verbs.xml
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Verb definitions for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Import commonly used beans.
+    -->
+    <import resource="../common-beans.xml"/>
+
+    <!--
+        Import channel-specific beans.
+    -->
+    <import resource="beans.xml"/>
+
+    <bean id="serializeImported" class="net.shibboleth.metadata.pipeline.SerializationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="serializeImported"/>
+        <property name="serializer" ref="serializer"/>
+        <property name="outputFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/it_idem/imported.xml"/>
+            </bean>
+        </property>
+    </bean>
+
+    <bean id="import" class="net.shibboleth.metadata.pipeline.SimplePipeline"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="import"/>
+        <property name="stages">
+            <list>
+                <ref bean="it_idem_exportedEntities"/>
+                <ref bean="standardImportTail"/>
+                <ref bean="serializeImported"/>
+            </list>
+        </property>
+    </bean>
+
+    <bean id="importRaw" class="net.shibboleth.metadata.pipeline.SimplePipeline"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="importRaw"/>
+        <property name="stages">
+            <list>
+                <ref bean="it_idem_productionAggregate"/>
+                <ref bean="serializeImported"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>