Tolerate EncryptionMethod in registered metadata by moving the check …

…for it down the pipeline. Filter EncryptionMethod out before publication on UK federation aggregates.
InCommon · May 11, 2011 · b1641fa · b1641fa
1 parent 148f792
commit b1641fa
Show file tree

Hide file tree

Showing 5 changed files with 44 additions and 11 deletions.
diff --git a/build/check_fixups.xsl b/build/check_fixups.xsl
@@ -46,4 +46,18 @@
 		</xsl:call-template>
 	</xsl:template>
 
+
+	<!--
+		Use of EncryptionMethod within KeyDescriptor causes metadata loading problems
+		for OpenSAML-C 2.0.
+		
+		See https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataCorrectness#MetadataCorrectness-Version2.0
+	-->
+	<xsl:template match="md:KeyDescriptor/md:EncryptionMethod">
+		<xsl:call-template name="fatal">
+			<xsl:with-param name="m">KeyDescriptor contains EncryptionMethod: OpenSAML-C 2.0 problem</xsl:with-param>
+		</xsl:call-template>
+	</xsl:template>
+
+
 </xsl:stylesheet>
diff --git a/build/check_shibboleth.xsl b/build/check_shibboleth.xsl
@@ -173,15 +173,4 @@
 	</xsl:template>
 
 
-	<!--
-		Use of EncryptionMethod within KeyDescriptor causes metadata loading problems
-		for OpenSAML-C 2.0.
-	-->
-	<xsl:template match="md:KeyDescriptor/md:EncryptionMethod">
-		<xsl:call-template name="fatal">
-			<xsl:with-param name="m">KeyDescriptor contains EncryptionMethod: OpenSAML-C 2.0 problem</xsl:with-param>
-		</xsl:call-template>
-	</xsl:template>
-
-
 </xsl:stylesheet>
diff --git a/build/uk_master_back.xsl b/build/uk_master_back.xsl
@@ -121,6 +121,16 @@
 		</xsl:copy>
 	</xsl:template>
 
+
+	<!--
+		Remove any EncryptionMethod elements within KeyDescriptor elements
+		to avoid triggering a problem in OpenSAML-C 2.0.
+		
+		See https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataCorrectness#MetadataCorrectness-Version2.0
+	-->
+	<xsl:template match="md:KeyDescriptor/md:EncryptionMethod"/>
+
+
 	<!--
 		Pass through certain ukfedlabel namespace elements.
 	-->

diff --git a/build/uk_master_test.xsl b/build/uk_master_test.xsl
@@ -143,6 +143,16 @@
 		</xsl:copy>
 	</xsl:template>
 
+
+	<!--
+		Remove any EncryptionMethod elements within KeyDescriptor elements
+		to avoid triggering a problem in OpenSAML-C 2.0.
+		
+		See https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataCorrectness#MetadataCorrectness-Version2.0
+	-->
+	<xsl:template match="md:KeyDescriptor/md:EncryptionMethod"/>
+
+
 	<!--
 		Normalise and pass through certain ukfedlabel namespace elements.
 	-->

diff --git a/build/uk_master_unsigned.xsl b/build/uk_master_unsigned.xsl
@@ -138,6 +138,16 @@
 		</xsl:copy>
 	</xsl:template>
 
+
+	<!--
+		Remove any EncryptionMethod elements within KeyDescriptor elements
+		to avoid triggering a problem in OpenSAML-C 2.0.
+		
+		See https://wiki.shibboleth.net/confluence/display/SHIB2/MetadataCorrectness#MetadataCorrectness-Version2.0
+	-->
+	<xsl:template match="md:KeyDescriptor/md:EncryptionMethod"/>
+
+
 	<!--
 		Normalise and pass through certain ukfedlabel namespace elements.
 	-->