Add warning to check_future_9 for SPs that WantAssertionsSigned

See ukf/ukf-meta#165

mdx/_rules/check_future_9.xsl

@@ -6,7 +6,8 @@
     Checking ruleset containing rules that we don't currently implement,
     but which we may implement in the future.
 
-    Author: Ian A. Young <ian@iay.org.uk>
+    This is to warn if an SP suggests that it wants signed assertions.
+    Typically, it is the response that should be signed.
 
 -->
 <xsl:stylesheet version="1.0"
@@ -23,5 +24,11 @@
     -->
     <xsl:import href="check_framework.xsl"/>
 
+    <xsl:template match="md:EntityDescriptor[md:SPSSODescriptor[@WantAssertionsSigned='true']]">
+        <xsl:call-template name="warning">
+            <xsl:with-param name="m">SP sets WantAssertionsSigned, although typically you would want Responses signed not Assertions</xsl:with-param>
+        </xsl:call-template>
+    </xsl:template>
+
 
 </xsl:stylesheet>