From b181e9c3caaf03296023ee7dac4bd8d060324d07 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Sat, 9 May 2009 14:27:05 +0000
Subject: [PATCH] Check for a construct which is known to cause the Shibboleth
 1.3 SP to dump core.

---
 build/check.xsl | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/build/check.xsl b/build/check.xsl
index a4f802b1..83224555 100644
--- a/build/check.xsl
+++ b/build/check.xsl
@@ -46,6 +46,24 @@
 	</xsl:template>
 	
 	
+	<!--
+		Check for a construct which is known to cause the Shibboleth 1.3 SP to dump core.
+		
+			<md:KeyDescriptor use="signing">
+				<ds:KeyInfo>
+					<KeyName>blabla<KeyName>
+				</ds:KeyInfo>
+			</md:KeyDescriptor>
+		
+		The issue here is that the KeyName does not have the ds: namespace.
+	-->
+	<xsl:template match="ds:KeyInfo/*[namespace-uri() != 'http://www.w3.org/2000/09/xmldsig#']">
+		<xsl:call-template name="fatal">
+			<xsl:with-param name="m">ds:KeyInfo child element not in ds namespace</xsl:with-param>
+		</xsl:call-template>
+	</xsl:template>
+	
+	
 	<!--
 		Common template to call to report a fatal error on some element within an entity.
 	-->