Add certificates to the signature on aggregates

InCommon · Jan 15, 2025 · c6b30d0 · c6b30d0
1 parent 4535891
commit c6b30d0
Showing 1 changed file with 20 additions and 1 deletion.
diff --git a/mdx/incommon/mdq-all.xml b/mdx/incommon/mdq-all.xml
@@ -124,7 +124,7 @@
                     p:XSLResource="classpath:incommon/ns_norm_import.xsl" />
 
                 <!-- Sign the aggregate -->
-                <ref bean="signItems" />
+                <ref bean="signAggregate" />
 
             </list>
         </property>
@@ -233,4 +233,23 @@
         </property>
     </bean>
 
+    <!--
+        signAggregate
+
+        Signs an aggregate using a privateKeyFactory defined elsewhere.
+        For aggregates, we include the certificate alongside the
+        signature. 
+    -->
+    <bean id="signAggregate" parent="mda.XMLSignatureSigningStage">
+        <property name="privateKey">
+            <ref bean="privateKeyFactory" />
+        </property>
+        <property name="certificates">
+            <list>
+                <bean id="us_incommon_signingCertificate" parent="mda.X509CertificateFactoryBean"
+                    p:resource="classpath:us_incommon/inc-md-cert.pem"/>
+            </list>
+        </property>
+    </bean>
+
 </beans>