Implement check_sp_tls

See incommon/inc-meta#85.
InCommon · Sep 6, 2017 · a2f8fc7 · a2f8fc7
1 parent 0404841
commit a2f8fc7
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/mdx/incommon/edugain-policy.xml b/mdx/incommon/edugain-policy.xml
@@ -375,6 +375,14 @@
                 <!-- Sub-rule t. -->
                 <ref bean="check_saml2meta"/>
 
+                <!--
+                    Sub-rule u.
+
+                    Mark SP entities with an endpoint location that
+                    is not HTTPS-protected.
+                -->
+                <ref bean="check_sp_tls"/>
+
                 <!--
                     *************************************
                     ***                               ***
@@ -408,7 +416,6 @@
                             <ref bean="check_saml2int"/>
                             <ref bean="check_saml_strings"/>
                             <ref bean="check_shibboleth"/>
-                            <ref bean="check_sp_tls"/>
                             <ref bean="check_uk_algorithms"/>
                             <ref bean="check_uk_trust"/>
                             <ref bean="check_uk_wayf"/>