From ee658966e70ef592654b2c5c0f3bd23af9debc2f Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Thu, 28 Feb 2013 10:10:51 +0000
Subject: [PATCH] Bugzilla 986: import.metadata should check certificate key
 length, flag warning for < 2048

---
 build.xml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/build.xml b/build.xml
index d8f9f8ad..e5a16238 100644
--- a/build.xml
+++ b/build.xml
@@ -768,6 +768,16 @@
         <delete file="${entities.dir}/imported.xml" quiet="true" verbose="false"/>
 		<CHANNEL.do channel="uk" verb="import"/>
 		<echo>Imported metadata to ${entities.dir}/imported.xml</echo>
+        <XALAN
+            i="${entities.dir}/imported.xml"
+            o="${xml.dir}/embedded.pem"
+            x="${build.dir}/extract_embedded.xsl"/>
+		<echo>Certificates extracted to "${xml.dir}/embedded.pem"</echo>
+        <exec executable="perl" dir="${xml.dir}"
+            input="${xml.dir}/embedded.pem">
+            <arg value="${build.dir}/check_embedded.pl"/>
+        	<arg value="-q"/>
+        </exec>
 	</target>
 	
     <!--