From b8ff006f085fb79707b4f222edf6f77e94e63fbb Mon Sep 17 00:00:00 2001
From: Dominic Martinez <dmartinez@unicon.net>
Date: Tue, 27 Jan 2026 13:04:48 -0700
Subject: [PATCH 1/2] Update validUntil on Incommon export for eduGAIN

---
 mdx/incommon/sign.xml          | 3 +++
 mdx/incommon/sign_localkey.xml | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/mdx/incommon/sign.xml b/mdx/incommon/sign.xml
index 2eeaab5..a577ad2 100644
--- a/mdx/incommon/sign.xml
+++ b/mdx/incommon/sign.xml
@@ -258,6 +258,9 @@
                     </property>
                 </bean>
 
+                <!-- change validUntil to 14 days out from today's date (by milliseconds) -->
+                <bean parent="mda.SetValidUntilStage" p:validityDuration="1210000000"/>
+
                 <!-- Sign the aggregate -->
                 <ref bean="signItems" />
 
diff --git a/mdx/incommon/sign_localkey.xml b/mdx/incommon/sign_localkey.xml
index a616296..5dc7130 100644
--- a/mdx/incommon/sign_localkey.xml
+++ b/mdx/incommon/sign_localkey.xml
@@ -259,6 +259,9 @@
                     </property>
                 </bean>
 
+                <!-- change validUntil to 14 days out from today's date (by milliseconds) -->
+                <bean parent="mda.SetValidUntilStage" p:validityDuration="1210000000"/>
+
                 <!-- Sign the aggregate -->
                 <ref bean="signItems" />
 

From c21625c4b3af0226dd850a99be527e417ee5bb4f Mon Sep 17 00:00:00 2001
From: Dominic Martinez <dmartinez@unicon.net>
Date: Wed, 28 Jan 2026 10:02:57 -0700
Subject: [PATCH 2/2] Update signing cert location for eduGAIN export

---
 mdx/incommon/sign.xml          | 2 +-
 mdx/incommon/sign_localkey.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/mdx/incommon/sign.xml b/mdx/incommon/sign.xml
index a577ad2..a9ba4fc 100644
--- a/mdx/incommon/sign.xml
+++ b/mdx/incommon/sign.xml
@@ -223,7 +223,7 @@
         <property name="certificates">
             <list>
                 <bean id="us_incommon_signingCertificate" parent="mda.X509CertificateFactoryBean"
-                    p:resource="classpath:us_incommon/inc-md-cert.pem"/>
+                    p:resource="classpath:us_incommon/inc-md-cert-mdq.pem"/>
             </list>
         </property>
     </bean>
diff --git a/mdx/incommon/sign_localkey.xml b/mdx/incommon/sign_localkey.xml
index 5dc7130..90f0e4e 100644
--- a/mdx/incommon/sign_localkey.xml
+++ b/mdx/incommon/sign_localkey.xml
@@ -224,7 +224,7 @@
         <property name="certificates">
             <list>
                 <bean id="us_incommon_signingCertificate" parent="mda.X509CertificateFactoryBean"
-                    p:resource="classpath:us_incommon/inc-md-cert.pem"/>
+                    p:resource="classpath:us_incommon/inc-md-cert-mdq.pem"/>
             </list>
         </property>
     </bean>