From 57c6fbaa46de443231e3539edf35a830c26bd098 Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Wed, 16 Apr 2014 11:18:38 +0000
Subject: [PATCH] Bugzilla 1098: exclude eduGAIN entities with Heartbleed
 issues.

---
 mdx/uk/blacklist.xml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/mdx/uk/blacklist.xml b/mdx/uk/blacklist.xml
index a2eec602..72297bca 100644
--- a/mdx/uk/blacklist.xml
+++ b/mdx/uk/blacklist.xml
@@ -36,6 +36,20 @@
         -->
         <value>https://lu-idp.lu.lv</value>
         
+        <!--
+            Temporary mitigation of Heartbleed vulnerability 2014-04-16.
+            
+            Remove eduGAIN entities that are still known to be vulnerable.
+        -->
+        <value>https://butare.ifrn.edu.br/idp/shibboleth</value>
+        <value>https://cafe.ifb.edu.br/idp/shibboleth</value>
+        <value>https://cafe.uesb.br/idp/shibboleth</value>
+        <value>https://dourado.ufs.br/idp/shibboleth</value>
+        <value>https://federacao.ifpi.edu.br/idp/shibboleth</value>
+        <value>https://idp.ifpb.edu.br/idp/shibboleth</value>
+        <value>https://marte.ifsertao-pe.edu.br/idp/shibboleth</value>
+        <value>https://shibboleth-idp.dti.ufv.br/idp/shibboleth</value>
+        
     </util:set>
     
 </beans>