Make a channel for eduID.cz (cz-eduid).

build.xml

@@ -1089,6 +1089,10 @@
         <CHANNEL.import channel="caf"/>
     </target>
 
+	<target name="flow.cz-eduid.import">
+		<CHANNEL.import channel="cz-eduid"/>
+	</target>
+
 	<target name="flow.edugate.import">
         <CHANNEL.import channel="edugate"/>
     </target>

mdx/cz-eduid/beans.xml

@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Common beans for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Fetch the export metadata aggregate.
+        
+        For the moment, use the production aggregate in lieu of a designated export aggregate.
+    -->
+    <bean id="cz-eduid.fetchExportAggregate" class="net.shibboleth.metadata.dom.DomHttpSourceStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="cz-eduid.fetchExportAggregate"/>
+        <property name="parserPool" ref="parserPool"/>
+        <property name="sourceUrl" value="https://metadata.eduid.cz/entities/eduid"/>        
+    </bean>
+
+    <!--
+        Metadata signing certificate.
+    -->
+    <bean id="cz-eduid.signingCertificate" class="net.shibboleth.ext.spring.factory.X509CertificateFactoryBean"
+        lazy-init="true">
+        <property name="certificateFile">
+            <bean class="java.io.File">
+                <constructor-arg value="#{ systemProperties['basedir'] }/mdx/cz-eduid/metadata.eduid.cz.crt.pem"/>
+            </bean>
+        </property>
+    </bean>
+
+    <!--
+        Check the signature on a document.
+    -->
+    <bean id="cz-eduid.checkSignature" class="net.shibboleth.metadata.dom.XMLSignatureValidationStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="cz-eduid.checkSignature"/>
+        <property name="verificationCertificate" ref="cz-eduid.signingCertificate"/>
+    </bean>
+
+    <!--
+        Fetch and process the exported entities as a collection.
+    -->
+    <bean id="cz-eduid.exportedEntities" class="net.shibboleth.metadata.pipeline.CompositeStage"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="cz-eduid.exportedEntities"/>
+        <property name="composedStages">
+            <list>
+                <ref bean="cz-eduid.fetchExportAggregate"/>
+                <ref bean="cz-eduid.checkSignature"/>
+
+                <!-- failure to validate signature is fatal -->
+                <ref bean="errorTerminatingFilter"/>
+
+                <ref bean="disassemble"/>
+
+                <ref bean="standardImportActions"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>

mdx/cz-eduid/import.xml

@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Import pipeline for this channel.
+-->
+<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd"> 
+
+    <!--
+        Import commonly used beans.
+    -->
+    <import resource="../common-beans.xml"/>
+
+    <!--
+        Import channel-specific beans.
+    -->
+    <import resource="beans.xml"/>
+
+    <bean id="pipeline" class="net.shibboleth.metadata.pipeline.SimplePipeline"
+        init-method="initialize" lazy-init="true">
+        <property name="id" value="pipeline"/>
+        <property name="stages">
+            <list>                
+                <ref bean="cz-eduid.exportedEntities"/>
+                <ref bean="standardImportTail"/>
+            </list>
+        </property>
+    </bean>
+
+</beans>

mdx/cz-eduid/metadata.eduid.cz.crt.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----