From 5d6a91bf33022f8d12d45293f9e2721b0a1c636d Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Tue, 13 Sep 2016 10:48:46 +0100
Subject: [PATCH] Verify that all registered entities have a UKFederationMember
 label

---
 mdx/uk/beans.xml           |  7 +++++++
 mdx/uk/check_uk_member.xsl | 32 ++++++++++++++++++++++++++++++++
 2 files changed, 39 insertions(+)
 create mode 100644 mdx/uk/check_uk_member.xsl

diff --git a/mdx/uk/beans.xml b/mdx/uk/beans.xml
index 1acb9162..f60e77db 100644
--- a/mdx/uk/beans.xml
+++ b/mdx/uk/beans.xml
@@ -206,6 +206,12 @@
         p:XSLResource="classpath:uk/check_uk_mdrps.xsl"/>
     
     
+    <!--
+        check_uk_member
+    -->
+    <bean id="check_uk_member" parent="XSLValidationStage"
+        p:XSLResource="classpath:uk/check_uk_member.xsl"/>
+
     <!--
         check_uk_urlenc
     -->
@@ -332,6 +338,7 @@
                 <ref bean="check_uk_keydesc_key"/>
                 <ref bean="check_uk_mdattr"/>
                 <ref bean="check_uk_mdrps"/>
+                <ref bean="check_uk_member"/>
                 <ref bean="check_uk_urlenc"/>
                 <ref bean="mdui_dn_en_present"/>
                 <ref bean="mdui_dn_en_match"/>
diff --git a/mdx/uk/check_uk_member.xsl b/mdx/uk/check_uk_member.xsl
new file mode 100644
index 00000000..f0b3d2c1
--- /dev/null
+++ b/mdx/uk/check_uk_member.xsl
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+	check_uk_member.xsl
+	
+    UKf-specific check that an entity has a UKFederationMember label.
+	
+	Author: Ian A. Young <ian@iay.org.uk>
+
+-->
+<xsl:stylesheet version="1.0"
+	xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
+	xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
+	xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+	xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
+    xmlns:ukfedlabel="http://ukfederation.org.uk/2006/11/label"
+	xmlns="urn:oasis:names:tc:SAML:2.0:metadata">
+
+	<!--
+		Common support functions.
+	-->
+	<xsl:import href="../_rules/check_framework.xsl"/>
+
+
+	<xsl:template match="md:EntityDescriptor/md:Extensions[not(ukfedlabel:UKFederationMember)]">
+		<xsl:call-template name="error">
+			<xsl:with-param name="m">entity does not have a UKFederationMember label</xsl:with-param>
+		</xsl:call-template>
+	</xsl:template>
+	
+	
+</xsl:stylesheet>