From 7b4a22ca9b1007753fa982dabc218933f62bba1c Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Sun, 29 Dec 2013 18:01:46 +0000
Subject: [PATCH] Use new InCommon new production aggregate; require SHA-256
 signature.

---
 mdx/us_incommon/beans.xml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/mdx/us_incommon/beans.xml b/mdx/us_incommon/beans.xml
index f13db61e..6ddf7bc5 100644
--- a/mdx/us_incommon/beans.xml
+++ b/mdx/us_incommon/beans.xml
@@ -16,6 +16,15 @@
         Location of various resources.
     -->
     <bean id="us_incommon_productionAggregate_url" class="java.lang.String">
+        <constructor-arg value="http://md.incommon.org/InCommon/InCommon-metadata.xml"/>
+    </bean>
+    <bean id="us_incommon_fallbackAggregate_url" class="java.lang.String">
+        <constructor-arg value="http://md.incommon.org/InCommon/InCommon-metadata-fallback.xml"/>
+    </bean>
+    <bean id="us_incommon_previewAggregate_url" class="java.lang.String">
+        <constructor-arg value="http://md.incommon.org/InCommon/InCommon-metadata-preview.xml"/>
+    </bean>
+    <bean id="us_incommon_legacyAggregate_url" class="java.lang.String">
         <constructor-arg value="http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml"/>
     </bean>
     
@@ -46,7 +55,7 @@
     <!--
         Check InCommon signing signature.
     -->
-    <bean id="us_incommon_checkSignature" parent="XMLSignatureValidationStage"
+    <bean id="us_incommon_checkSignature" parent="XMLSignatureValidationStageSHA256"
         p:id="us_incommon_checkSignature">
         <property name="verificationCertificate" ref="us_incommon_signingCertificate"/>
     </bean>