INTERNAL CHANGE

Add some very preliminary and experimental download and checking support for the Edugate federation metadata.

build.xml

@@ -855,7 +855,7 @@
 				<!-- set of checking stylesheets applied in every case -->
                 <arg value="${build.dir}/check_adfs.xsl"/>
                 <arg value="${build.dir}/check_idpdisc.xsl"/>
-				<arg value="${build.dir}/check_init.xsl"/>
+                <arg value="${build.dir}/check_init.xsl"/>
 				<arg value="${build.dir}/check_mdiop.xsl"/>
 				<arg value="${build.dir}/check_mdui.xsl"/>
                 <arg value="${build.dir}/check_misc.xsl"/>
@@ -867,6 +867,64 @@
 		</sequential>
 	</macrodef>
 
+    <!--
+        ***********************************************
+        ***                                         ***
+        ***   E D U G A T E   F E D E R A T I O N   ***
+        ***                                         ***
+        ***********************************************
+    -->
+
+    <property name="edugate.dir" value="${feds.dir}/edugate"/>
+    <property name="edugate.metadata.location"
+        value="https://edugate.heanet.ie/edugate-metadata-signed.xml"/>
+    <property name="edugate.metadata.cert"
+       value="${edugate.dir}/metadata-signer.crt"/>
+
+    <macrodef name="XMLSECTOOL.VFY.edugate">
+        <attribute name="i"/><!-- input file, assumed to be in the XML directory -->
+        <sequential>
+            <XMLSECTOOL i="@{i}">
+                <args>
+                    <arg value="--verifySignature"/>
+                    <arg value="--certificate"/>
+                    <arg value="${edugate.metadata.cert}"/>
+                    <!--
+                    <arg value="- -quiet"/>
+                    -->
+                </args>
+            </XMLSECTOOL>
+        </sequential>
+    </macrodef>
+
+    <target name="verify.edugate">
+        <echo>Verifying metadata held at ${edugate.metadata.location}</echo>
+        <delete file="${xml.dir}/temp.xml" quiet="true" verbose="false"/>
+        <get src="${edugate.metadata.location}" dest="${xml.dir}/temp.xml"/>
+
+        <!--
+            Verify using metadatatool.
+        -->
+        <!-- <MDT.VFY.uk i="temp.xml"/> -->
+
+        <!--
+            Verify using xmlsectool.
+        -->
+        <XMLSECTOOL.VFY.edugate i="temp.xml"/>
+
+        <!--
+            Run UK checking rulesets.
+        -->
+        <CHECK i="${xml.dir}/temp.xml" s="check_imported.xsl"/>
+
+        <!--
+            Delete the temporary file.
+        -->
+        <delete file="${xml.dir}/temp.xml" quiet="true" verbose="false"/>
+
+        <echo>Verification completed.</echo>
+    </target>
+
 	<!--
 	    *************************************************
 	    ***                                           ***

feds/edugate/metadata-signer.crt

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----
+MIID0jCCArqgAwIBAgIBBzANBgkqhkiG9w0BAQUFADBWMQswCQYDVQQGEwJJRTER
+MA8GA1UECBMITGVpbnN0ZXIxDzANBgNVBAoTBkhFQW5ldDETMBEGA1UECxMKTWlk
+ZGxld2FyZTEOMAwGA1UEAxMFc3ViQ0EwHhcNMDgxMDA3MTUwOTM5WhcNMTExMDA3
+MTUwOTM5WjBTMQswCQYDVQQGEwJJRTERMA8GA1UECBMITGVpbnN0ZXIxDzANBgNV
+BAoTBkhFQW5ldDEgMB4GA1UEAxMXRWR1Z2F0ZSBNZXRhZGF0YSBTaWduZXIwggEi
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bOrwU9w0zDb55WzDDTpQ0TVf
+LetQ7fzyh9O0nwB5WFL2H1cSONIa/wIyRI9UUVOQZBVGfqXHVM2pmyJF/xI8J5ut
+IRnSM2DIw/n44LGfotpNgTjP8iIcLUlZ3sXubHPiXyFFYsVBoTSXjBKO7gB2PNfv
+BKWvFq/wUmjtOfleeTG3vmvh4WSkfwSJi9RtDdSpHO1BzbgihvJBlzW+qfrdGIYC
+tfV5zvcA0X2i8uCncDIn5c/9FGhYLp/hbv0QIndTvF+eU48nHlvpvJ6pDwmdijE4
+lm+guMWdQH2nQiqw1/cotlJ1s1ECH1NxWv5WlnrV1k80S0KGE3BCaX+He3RBAgMB
+AAGjga0wgaowCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYdT3BlblNTTCBHZW5l
+cmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFPSN4Jg+HZ+QwFAkBKMWUE5WDtdk
+MB8GA1UdIwQYMBaAFMU1MBCiyaz85LvFW6uyU12OqTViMC8GCWCGSAGG+EIBBAQi
+FiBodHRwOi8vd3d3LmVkdWdhdGUuaWUvY2EtY3JsLnBlbTANBgkqhkiG9w0BAQUF
+AAOCAQEAz6AnVhusyZvycXu4p9Kt/wuL6VAe2CZUfREsMVHNAsSBvyl82MeoKb+c
+0iX/V+fg19PxSDQU3NE9yasRSghmwPsjI7+YoSs3G/qcIu687aO78MLx0ruPFDRX
+ebn1CdIqw1ocI2jdjclF61OooEkNYhgNhf6w7NI/cmN+g16CrpedqKrBbdfw7g3p
+GZENzqNzt6Q3YxRrBnaT3uR9cdsBDC16Isa9aO9mwGrzkJ1XHLMZ9piqSD7OJTyx
+KqnBZNF2Ny8Ah/jUT18Kp+kmQM9yaot8yxtng6WQpnJSJsF3ejFjrdjzyAdzH6bq
+3DdnGL5p5J5wIx9qxRq8JGJZJ1rxSQ==
+-----END CERTIFICATE-----