From d87a481c3e9c9c8b124cfed37bf74d0ad840f21c Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Tue, 21 May 2019 16:23:26 +0100
Subject: [PATCH] Add new eduGAIN signing certificate and README

See ukf/ukf-meta#187.
---
 mdx/int_edugain/README.md  | 18 ++++++++++++++++++
 mdx/int_edugain/mds-v1.cer | 18 ++++++++++++++++++
 2 files changed, 36 insertions(+)
 create mode 100644 mdx/int_edugain/README.md
 create mode 100644 mdx/int_edugain/mds-v1.cer

diff --git a/mdx/int_edugain/README.md b/mdx/int_edugain/README.md
new file mode 100644
index 00000000..b0f2c7f3
--- /dev/null
+++ b/mdx/int_edugain/README.md
@@ -0,0 +1,18 @@
+# `mdx/int_edugain`
+
+Resources associated with the eduGAIN interfederation.
+
+Certificates:
+
+* `mds-v1.cer` is the certificate to be used for signing the eduGAIN metadata
+  aggregate at `https://mds.edugain.org/edugain-v1.xml` from early 2019.
+
+* `mds-2014.cer` is the certificate used for signing eduGAIN metadata at
+  `https://mds.edugain.org` and `https://mds.edugain.org/feed-256.xml` until
+  mid-2019, at which point those locations switch to the `mds-v1.cer`
+  certificate for compatibility.
+
+Note that these two certificates wrap the same 2048-bit public key.
+
+See the [eduGAIN certificate change
+roadmap](https://technical.edugain.org/certificate_change) for further details.
diff --git a/mdx/int_edugain/mds-v1.cer b/mdx/int_edugain/mds-v1.cer
new file mode 100644
index 00000000..47ee676b
--- /dev/null
+++ b/mdx/int_edugain/mds-v1.cer
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----