From eedfee5adf2687fcb88b14c129c599e1e2207e45 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Wed, 11 Dec 2013 11:19:29 +0000
Subject: [PATCH] at_aconet eduGAIN aggregate is now signed with SHA-256.
 Production aggregate remains SHA-1.

---
 mdx/at_aconet/beans.xml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/mdx/at_aconet/beans.xml b/mdx/at_aconet/beans.xml
index d2a85b2f..06526132 100644
--- a/mdx/at_aconet/beans.xml
+++ b/mdx/at_aconet/beans.xml
@@ -64,8 +64,12 @@
     <!--
         Check signing signature.
     -->
-    <bean id="at_aconet_checkSignature" parent="XMLSignatureValidationStage"
-        p:id="at_aconet_checkSignature">
+    <bean id="at_aconet_checkProductionSignature" parent="XMLSignatureValidationStage"
+        p:id="at_aconet_checkProductionSignature">
+        <property name="verificationCertificate" ref="at_aconet_signingCertificate"/>
+    </bean>
+    <bean id="at_aconet_checkEdugainSignature" parent="XMLSignatureValidationStageSHA256"
+        p:id="at_aconet_checkEdugainSignature">
         <property name="verificationCertificate" ref="at_aconet_signingCertificate"/>
     </bean>
     
@@ -123,7 +127,7 @@
                         invalid signature
                 -->
                 <ref bean="check_validUntil"/>
-                <ref bean="at_aconet_checkSignature"/>
+                <ref bean="at_aconet_checkProductionSignature"/>
                 <ref bean="errorTerminatingFilter"/>
                 
                 <ref bean="disassemble"/>
@@ -146,7 +150,7 @@
                         invalid signature
                 -->
                 <ref bean="check_validUntil"/>
-                <ref bean="at_aconet_checkSignature"/>
+                <ref bean="at_aconet_checkEdugainSignature"/>
                 <ref bean="errorTerminatingFilter"/>
                 
                 <ref bean="disassemble"/>