Bugzilla 1098: exclude eduGAIN entities with Heartbleed issues.

internet2 · Apr 16, 2014 · 57c6fba · 57c6fba
1 parent dddc1b6
commit 57c6fba
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/mdx/uk/blacklist.xml b/mdx/uk/blacklist.xml
@@ -36,6 +36,20 @@
         -->
         <value>https://lu-idp.lu.lv</value>
 
+        <!--
+            Temporary mitigation of Heartbleed vulnerability 2014-04-16.
+            
+            Remove eduGAIN entities that are still known to be vulnerable.
+        -->
+        <value>https://butare.ifrn.edu.br/idp/shibboleth</value>
+        <value>https://cafe.ifb.edu.br/idp/shibboleth</value>
+        <value>https://cafe.uesb.br/idp/shibboleth</value>
+        <value>https://dourado.ufs.br/idp/shibboleth</value>
+        <value>https://federacao.ifpi.edu.br/idp/shibboleth</value>
+        <value>https://idp.ifpb.edu.br/idp/shibboleth</value>
+        <value>https://marte.ifsertao-pe.edu.br/idp/shibboleth</value>
+        <value>https://shibboleth-idp.dti.ufv.br/idp/shibboleth</value>
+
     </util:set>
 
 </beans>