From d1a44d22f872830fd4c393218b2b4e30173a7bde Mon Sep 17 00:00:00 2001
From: Dominic Martinez <dmartinez@unicon.net>
Date: Tue, 10 Feb 2026 07:33:21 -0700
Subject: [PATCH] TIDO-588 Set validUntil when signing export aggregate (#25)

* Update validUntil on Incommon export for eduGAIN
* Update signing cert location for eduGAIN export
---
 mdx/incommon/sign.xml          | 5 ++++-
 mdx/incommon/sign_localkey.xml | 5 ++++-
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/mdx/incommon/sign.xml b/mdx/incommon/sign.xml
index 2eeaab5..a9ba4fc 100644
--- a/mdx/incommon/sign.xml
+++ b/mdx/incommon/sign.xml
@@ -223,7 +223,7 @@
         <property name="certificates">
             <list>
                 <bean id="us_incommon_signingCertificate" parent="mda.X509CertificateFactoryBean"
-                    p:resource="classpath:us_incommon/inc-md-cert.pem"/>
+                    p:resource="classpath:us_incommon/inc-md-cert-mdq.pem"/>
             </list>
         </property>
     </bean>
@@ -258,6 +258,9 @@
                     </property>
                 </bean>
 
+                <!-- change validUntil to 14 days out from today's date (by milliseconds) -->
+                <bean parent="mda.SetValidUntilStage" p:validityDuration="1210000000"/>
+
                 <!-- Sign the aggregate -->
                 <ref bean="signItems" />
 
diff --git a/mdx/incommon/sign_localkey.xml b/mdx/incommon/sign_localkey.xml
index a616296..90f0e4e 100644
--- a/mdx/incommon/sign_localkey.xml
+++ b/mdx/incommon/sign_localkey.xml
@@ -224,7 +224,7 @@
         <property name="certificates">
             <list>
                 <bean id="us_incommon_signingCertificate" parent="mda.X509CertificateFactoryBean"
-                    p:resource="classpath:us_incommon/inc-md-cert.pem"/>
+                    p:resource="classpath:us_incommon/inc-md-cert-mdq.pem"/>
             </list>
         </property>
     </bean>
@@ -259,6 +259,9 @@
                     </property>
                 </bean>
 
+                <!-- change validUntil to 14 days out from today's date (by milliseconds) -->
+                <bean parent="mda.SetValidUntilStage" p:validityDuration="1210000000"/>
+
                 <!-- Sign the aggregate -->
                 <ref bean="signItems" />