From f55cd7f0be1650784062583e0dd34e7a55e95c05 Mon Sep 17 00:00:00 2001
From: Alex Stuart <alex.stuart@jisc.ac.uk>
Date: Fri, 6 Jul 2018 12:14:46 +0100
Subject: [PATCH] Add warning to check_future_9 for SPs that
 WantAssertionsSigned

See ukf/ukf-meta#165
---
 mdx/_rules/check_future_9.xsl | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/mdx/_rules/check_future_9.xsl b/mdx/_rules/check_future_9.xsl
index 54911d3d..546f4275 100644
--- a/mdx/_rules/check_future_9.xsl
+++ b/mdx/_rules/check_future_9.xsl
@@ -6,7 +6,8 @@
     Checking ruleset containing rules that we don't currently implement,
     but which we may implement in the future.
 
-    Author: Ian A. Young <ian@iay.org.uk>
+    This is to warn if an SP suggests that it wants signed assertions.
+    Typically, it is the response that should be signed.
 
 -->
 <xsl:stylesheet version="1.0"
@@ -23,5 +24,11 @@
     -->
     <xsl:import href="check_framework.xsl"/>
 
+    <xsl:template match="md:EntityDescriptor[md:SPSSODescriptor[@WantAssertionsSigned='true']]">
+        <xsl:call-template name="warning">
+            <xsl:with-param name="m">SP sets WantAssertionsSigned, although typically you would want Responses signed not Assertions</xsl:with-param>
+        </xsl:call-template>
+    </xsl:template>
+
 
 </xsl:stylesheet>