From 2f33119616af38d047e810a3769622291eaa966b Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Wed, 25 Jun 2014 15:51:05 +0000
Subject: [PATCH] Require strict MDIOP compliance now that we don't allow for
 KeyName.

---
 mdx/_rules/check_mdiop.xsl | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/mdx/_rules/check_mdiop.xsl b/mdx/_rules/check_mdiop.xsl
index 167cdaf3..ac3104fd 100644
--- a/mdx/_rules/check_mdiop.xsl
+++ b/mdx/_rules/check_mdiop.xsl
@@ -25,15 +25,8 @@
 
 	<!--
 		Section 2.5.1: at least one representation must appear.
-		
-		As well as the variations specified in the IOP, we also allow a KeyName to be
-		used, as the UK federation currently allows a pure PKIX setup as an
-		alternative to embedded keys.
-		
-		Strict IOP conformance would require the removal of the KeyInfo/KeyName clause.
 	-->
 	<xsl:template match="md:KeyDescriptor
-		[not(ds:KeyInfo/ds:KeyName)]
 		[not(ds:KeyInfo/ds:KeyValue)]
 		[not(ds:KeyInfo/ds:X509Data/ds:X509Certificate)]">
 		<xsl:call-template name="error">