From bf052f1f31c181f197ccd9fcf626b79778d0ec34 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Wed, 2 Mar 2011 18:31:16 +0000
Subject: [PATCH] INTERNAL CHANGE Add some very preliminary and experimental
 download and checking support for the Edugate federation metadata.

---
 build.xml                        | 60 +++++++++++++++++++++++++++++++-
 feds/edugate/metadata-signer.crt | 23 ++++++++++++
 2 files changed, 82 insertions(+), 1 deletion(-)
 create mode 100644 feds/edugate/metadata-signer.crt

diff --git a/build.xml b/build.xml
index 3153d494..f359f7ce 100644
--- a/build.xml
+++ b/build.xml
@@ -855,7 +855,7 @@
 				<!-- set of checking stylesheets applied in every case -->
                 <arg value="${build.dir}/check_adfs.xsl"/>
                 <arg value="${build.dir}/check_idpdisc.xsl"/>
-				<arg value="${build.dir}/check_init.xsl"/>
+                <arg value="${build.dir}/check_init.xsl"/>
 				<arg value="${build.dir}/check_mdiop.xsl"/>
 				<arg value="${build.dir}/check_mdui.xsl"/>
                 <arg value="${build.dir}/check_misc.xsl"/>
@@ -867,6 +867,64 @@
 		</sequential>
 	</macrodef>
 	
+    <!--
+        ***********************************************
+        ***                                         ***
+        ***   E D U G A T E   F E D E R A T I O N   ***
+        ***                                         ***
+        ***********************************************
+    -->
+    
+    <property name="edugate.dir" value="${feds.dir}/edugate"/>
+    <property name="edugate.metadata.location"
+        value="https://edugate.heanet.ie/edugate-metadata-signed.xml"/>
+    <property name="edugate.metadata.cert"
+       value="${edugate.dir}/metadata-signer.crt"/>
+    
+    <macrodef name="XMLSECTOOL.VFY.edugate">
+        <attribute name="i"/><!-- input file, assumed to be in the XML directory -->
+        <sequential>
+            <XMLSECTOOL i="@{i}">
+                <args>
+                    <arg value="--verifySignature"/>
+                    <arg value="--certificate"/>
+                    <arg value="${edugate.metadata.cert}"/>
+                    <!--
+                    <arg value="- -quiet"/>
+                    -->
+                </args>
+            </XMLSECTOOL>
+        </sequential>
+    </macrodef>
+
+    <target name="verify.edugate">
+        <echo>Verifying metadata held at ${edugate.metadata.location}</echo>
+        <delete file="${xml.dir}/temp.xml" quiet="true" verbose="false"/>
+        <get src="${edugate.metadata.location}" dest="${xml.dir}/temp.xml"/>
+        
+        <!--
+            Verify using metadatatool.
+        -->
+        <!-- <MDT.VFY.uk i="temp.xml"/> -->
+
+        <!--
+            Verify using xmlsectool.
+        -->
+        <XMLSECTOOL.VFY.edugate i="temp.xml"/>
+        
+        <!--
+            Run UK checking rulesets.
+        -->
+        <CHECK i="${xml.dir}/temp.xml" s="check_imported.xsl"/>
+        
+        <!--
+            Delete the temporary file.
+        -->
+        <delete file="${xml.dir}/temp.xml" quiet="true" verbose="false"/>
+        
+        <echo>Verification completed.</echo>
+    </target>
+
 	<!--
 	    *************************************************
 	    ***                                           ***
diff --git a/feds/edugate/metadata-signer.crt b/feds/edugate/metadata-signer.crt
new file mode 100644
index 00000000..465b85ef
--- /dev/null
+++ b/feds/edugate/metadata-signer.crt
@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----