Merge upstream changes for incommon-v9 #3

iay · 2019-02-25T16:41:16Z

See inc-meta#93.

This was needed circa 2013 to guard against a curl-based issue in the Shibboleth SP. This can no longer affect us because we no longer use the PKIX trust model.

See ukf/ukf-meta#144.

See ukf/ukf-meta#145.

…er eduGAIN Members page

…ata.

See ukf/ukf-meta#146

These IDs are currently defaulted by the validators, but that behaviour will go away in a future MDA release.

See ukf/ukf-meta#147.

See ukf/ukf-meta#127.

See ukf/ukf-meta#21.

See ukf/ukf-meta#149

Iterate on the generation of mdui:UIInfo for identitify providers which do not have mdui:UIInfo already. Reduces the number of warnings we get from the eduGAIN validator. See ukf/ukf-meta#150.

See ukf/ukf-meta#21.

…ort aggregates See ukf/ukf-meta#21. See ukf/ukf-meta#150.

See ukf/ukf-meta#21.

Now that this is being done everywhere, we can just do it once, and simplify the way it's done. See ukf/ukf-meta#150.

Check is flagged as warning. See ukf/ukf-meta#157

See ukf/ukf-meta#159.

Relaxes the definition of a clash between identity provider display names to ignore md:OrganizationDisplayName for any IdP that has mdui:DisplayName. See ukf/ukf-meta#150.

Resolves ukf/ukf-data#20.

Resolves ukf/ukf-meta#154.

See ukf/ukf-meta#164

See ukf/ukf-meta#165

…tructure

Resolves ukf/ukf-meta#169.

See ukf/ukf-meta#117.

iay · 2019-02-25T16:48:37Z

@dshafer @nroy It's worth passing your eyes over this one in a bit more detail to see what a larger (but still non-conflicting) PR looks like. The tabs at the top allow you to look at things from the perspective of the individual commits, or alternatively by the aggregate changes to files. The latter view might be easier to skim for the current purposes, because of course you can entirely skip over any files that are UKf-specific.

iay

Looks like a clean set of changes. A trial merge behaves as expected (one CZ entity re-included).

iay and others added 30 commits August 29, 2017 10:56

Remove checks for consistent certificate alternative names

fe2ddab

This was needed circa 2013 to guard against a curl-based issue in the Shibboleth SP. This can no longer affect us because we no longer use the PKIX trust model.

Pass validity interval in from build.xml

56b985a

See ukf/ukf-meta#144.

set validUntil using the available MDA stage instead of XSLT

46e6c9c

See ukf/ukf-meta#145.

Centralise setting of ID attribute on aggregates

90d95ec

Refresh list of federations and their registrationAuthority URLs as p…

0b11c91

…er eduGAIN Members page

Fix spacing in charting statistics

6395641

Update slack channel that Ant (on aggr) posts to in build.xml.

32c1a74

Update slack channel that daily stats get set to

78d613d

Add utilities/contacts-from-sf.sh for processing Salesforce contact d…

6388bff

…ata.

Add utilities/list_addresses.pl to generate list of email addresses

df0f598

See ukf/ukf-meta#146

Allow list_addresses.pl to incorporate MC email addresses.

1693bdc

See ukf/ukf-meta#146

Add checks for ROCA-vulnerable RSA keys

ffac2b8

Make validator IDs explicit

9f94f11

These IDs are currently defaulted by the validators, but that behaviour will go away in a future MDA release.

Remove xsi:type from imported entity attribute values

4a9c79a

See ukf/ukf-meta#147.

Strip schemaLocations from MDQ test output

60393a7

See ukf/ukf-meta#127.

Update build process to use new path locations on web servers

78f9200

Populate UKf MDUI DisplayName in test, export-preview aggregates

52c3b3e

See ukf/ukf-meta#21.

Remove header and footer in output from list_addresses.pl

6a1ef6b

See ukf/ukf-meta#149

Reorganize and comment for clarity

4e49454

Move two UKf-only checks into the uk directory

caa39fa

Add mdui:Description to generated IdP mdui:UIInfo

9c7b0c5

Iterate on the generation of mdui:UIInfo for identitify providers which do not have mdui:UIInfo already. Reduces the number of warnings we get from the eduGAIN validator. See ukf/ukf-meta#150.

Update list of registrars and country codes

3e9c90f

Update path on webserver to copy members file to

7e6a22e

Populate UKf MDUI DisplayName,Description in cdsall aggregates

9b6c6de

See ukf/ukf-meta#21.

Restrospective update to aggregate status in README

083fef9

Populate UKf MDUI DisplayName,Description in production, wayf and exp…

d42223d

…ort aggregates See ukf/ukf-meta#21. See ukf/ukf-meta#150.

Increase memory allowed for MDA to 1.25GB

91d41c0

Populate UKf MDUI DisplayName,Description in fallback aggregate

8f349d6

See ukf/ukf-meta#21.

Add MDUI summary to direct charting statistics

724330a

Consolidate ODN-to-MDUI processing

f1fbf44

Now that this is being done everywhere, we can just do it once, and simplify the way it's done. See ukf/ukf-meta#150.

Alex Stuart and others added 26 commits March 8, 2018 15:38

Re-add future check for algorithm support consistent with new saml2int

1dbd1a0

Check is flagged as warning. See ukf/ukf-meta#157

Use xsltproc instead of Xalan

dd671fe

See ukf/ukf-meta#159.

Use xsltproc instead of Xalan

8db4b4d

See ukf/ukf-meta#159.

Use xsltproc instead of Xalan

8a297d7

See ukf/ukf-meta#159.

Use xsltproc instead of Xalan

7a1f135

See ukf/ukf-meta#159.

Delete some attic material referencing Xalan

dcddefd

See ukf/ukf-meta#159.

Use xsltproc instead of Xalan

4f74fc5

See ukf/ukf-meta#159.

Tidy up some references to Xalan

bfd4ae2

See ukf/ukf-meta#159.

Upgrade to ukf-mda v0.9.7

f9cb04c

Relaxes the definition of a clash between identity provider display names to ignore md:OrganizationDisplayName for any IdP that has mdui:DisplayName. See ukf/ukf-meta#150.

Restore direct checking of an Austrian IdP

fee4cc5

Resolves ukf/ukf-data#20.

Ignore unknown namespaces on import

fca94f2

Resolves ukf/ukf-meta#154.

Update for new Wugen filenames

a758e63

Enable check_future_5 to check validity of errorURL

0e8f0ac

See ukf/ukf-meta#164

Add warning to check_future_9 for SPs that WantAssertionsSigned

f55cd7f

See ukf/ukf-meta#165

Add eduroam.cz eduroamUID SAML2 attribute to whitelist

549acc5

Modify build process so we don't clear temp directory at the end.

20bc3bc

Update stats script for column change in log files

e7e8520

Suppress grep errors on stats generation script

87dfacb

Update stats generation script for new version of Wugen

67348d0

Fix issue in stats generation for wugen

e49fb11

Add support for pushing MD aggregates and MDQ cache to new CDI infras…

6335591

…tructure

Fix issue with verifying remote MDQ all entities on CDI-master

6b112f4

Allow WARN messages to be flagged for the import pipeline

2122eb7

Resolves ukf/ukf-meta#169.

Convert tabs to spaces

d8fcd5a

Report expiry whitelist size

4619daa

Treat DSA keys in metadata as errors

8417088

See ukf/ukf-meta#117.

iay commented Feb 25, 2019

View reviewed changes

iay merged commit e8c45c3 into master Feb 26, 2019

iay deleted the inc-meta-93-upstream branch February 26, 2019 16:54

Merge upstream changes for incommon-v9 #3

Merge upstream changes for incommon-v9 #3

iay commented Feb 25, 2019

iay commented Feb 25, 2019

iay left a comment

Merge upstream changes for incommon-v9 #3

Merge upstream changes for incommon-v9 #3

Conversation

iay commented Feb 25, 2019

iay commented Feb 25, 2019

iay left a comment

Choose a reason for hiding this comment