From df754e9c9c9c89e32a7107e7c147d1b2859edcaf Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Thu, 14 Nov 2013 13:32:11 +0000
Subject: [PATCH] Add a veryify.all verb to the int_edugain channel to allow
 verification of all entities, i.e., ignoring the verification blacklist.

---
 build.xml                 |  3 +++
 mdx/int_edugain/verbs.xml | 29 +++++++++++++++++++++++++++++
 2 files changed, 32 insertions(+)

diff --git a/build.xml b/build.xml
index 6716c5fd..21e66cf0 100644
--- a/build.xml
+++ b/build.xml
@@ -1064,6 +1064,9 @@
     <target name="flow.verifyEdugain.output">
         <CHANNEL.do verb="verify" channel="int_edugain"/>
     </target>
+    <target name="flow.verifyEdugain.output.all">
+        <CHANNEL.do verb="verify.all" channel="int_edugain"/>
+    </target>
     
 	<!--
 	    flow.importRaw.all
diff --git a/mdx/int_edugain/verbs.xml b/mdx/int_edugain/verbs.xml
index 0f6d7909..f129a71b 100644
--- a/mdx/int_edugain/verbs.xml
+++ b/mdx/int_edugain/verbs.xml
@@ -94,6 +94,35 @@
         </property>
     </bean>
 
+    <!--
+        verify.all
+        
+        Same as verify, but not making use of the validation
+        blacklist. Can be used to check up on blacklisted entities.
+    -->
+    <bean id="verify.all" parent="SimplePipeline"
+        p:id="verify.all">
+        <property name="stages">
+            <list>
+                <ref bean="int_edugain_productionEntities"/>
+                
+                <bean parent="X509CertificateValidationStage"
+                    p:id="checkCertificates">
+                    <property name="validators">
+                        <list>
+                            <!-- Error on RSA key length less than 2048 bits. -->
+                            <bean parent="X509CertificateRSAKeyLengthValidator"
+                                p:warningBoundary="0" p:errorBoundary="2048"/>
+                        </list>
+                    </property>
+                </bean>
+                
+                <ref bean="standardImportActions"/>
+                <ref bean="errorTerminatingFilter"/>
+            </list>
+        </property>
+    </bean>
+    
     <alias alias="import"    name="importProduction"/>
     <alias alias="importRaw" name="importProductionRaw"/>
 </beans>