Updated case of InCommon URIs and added CAs to trust file.

git-svn-id: https://svn.middleware.georgetown.edu/cpp-sp/trunk@478 cb58f699-b61c-0410-a6fe-9272a202ed29

diff --git a/configs/AAP.xml b/configs/AAP.xml
index b9038cc..7327f41 100644 (file)
--- a/configs/AAP.xml
+++ b/configs/AAP.xml
@@ -41,10 +41,10 @@
                -->
                
                <!-- Specific rules for an origin site, these are just development/sample sites. -->
-               <SiteRule Name="urn:mace:InCommon:pilot:example.edu">
+               <SiteRule Name="urn:mace:incommon:pilot:example.edu">
                        <Value Type="regexp">^urn:mace:.+$</Value>
                </SiteRule>
-               <SiteRule Name="urn:mace:InCommon:pilot:shibdev.edu">
+               <SiteRule Name="urn:mace:incommon:pilot:shibdev.edu">
                        <Value Type="regexp">^urn:mace:.+$</Value>
                </SiteRule>
        </AttributeRule>

diff --git a/configs/shibboleth.ini b/configs/shibboleth.ini
index 62d811b..6a764f3 100644 (file)
--- a/configs/shibboleth.ini
+++ b/configs/shibboleth.ini
@@ -60,7 +60,7 @@ urn:mace:eduPerson:1.0:eduPersonScopedAffiliation=scoped
 urn:mace:eduPerson:1.0:eduPersonEntitlement=simple
 
 [policies]
-InCommonPilot=urn:mace:InCommon:pilot
+InCommonPilot=urn:mace:incommon:pilot
 
 [my.server.name]
 # list of attributes to request for server "my.server.name"

diff --git a/configs/sites.xml b/configs/sites.xml
index a8acc01..6336ca8 100644 (file)
--- a/configs/sites.xml
+++ b/configs/sites.xml
@@ -1,11 +1,13 @@
-<SiteGroup Name="urn:mace:InCommon:pilot" xmlns="urn:mace:shibboleth:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-    <OriginSite Name="urn:mace:InCommon:pilot:example.edu">
+<SiteGroup Name="urn:mace:incommon:pilot" xmlns="urn:mace:shibboleth:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+    <OriginSite Name="urn:mace:incommon:pilot:example.edu">
         <Alias>Example State University</Alias>
+        <Contact Type="technical" Name="Alfred E. Neuman" Email="(no email)"/>
         <HandleService Location="https://wayf.internet2.edu/shibboleth/HS" Name="wayf.internet2.edu"/>
         <Domain>example.edu</Domain>
     </OriginSite>
-    <OriginSite Name="urn:mace:InCommon:pilot:shibdev.edu">
+    <OriginSite Name="urn:mace:incommon:pilot:shibdev.edu">
         <Alias>Shibboleth Development Origin</Alias>
+        <Contact Type="technical" Name="Scott Cantor" Email="cantor.2@osu.edu"/>
         <HandleService Location="https://shib2.internet2.edu/shibboleth/HS" Name="shib2.internet2.edu"/>
         <Domain>shibdev.edu</Domain>
     </OriginSite>

diff --git a/configs/trust.xml b/configs/trust.xml
index 21959a9..7458063 100644 (file)
--- a/configs/trust.xml
+++ b/configs/trust.xml
@@ -24,6 +24,7 @@ cDX2RCaY4D26R2cta7ZvXo7CUgJ7vbybSZ7QbqKs3yZcVXIL5sJXkhbZ3dnZRqiEm2VP9ZY=
     <KeyAuthority>
         <ds:KeyInfo>
             <ds:X509Data>
+               <!-- HEPKI Master Test CA -->
                 <ds:X509Certificate>MIIC6zCCAlSgAwIBAgICAlQwDQYJKoZIhvcNAQEEBQAwgakxCzAJBgNVBAYTAlVT
 MRIwEAYDVQQIEwlXaXNjb25zaW4xEDAOBgNVBAcTB01hZGlzb24xIDAeBgNVBAoT
 F1VuaXZlcnNpdHkgb2YgV2lzY29uc2luMSswKQYDVQQLEyJEaXZpc2lvbiBvZiBJ
@@ -42,8 +43,173 @@ QBqLb9DfPG2GkJ1uOK75wPY6XWusCKDJKMVY/N4ec9ew55MnDlFFvl4C+LkiS2YS
 Ysrh7fFJKKp7Pkc1fxsusK+MBXjVZtq0baXsU637qw==
 </ds:X509Certificate>
             </ds:X509Data>
+            <ds:X509Data>
+               <!-- Thawte Premium Server CA -->
+                <ds:X509Certificate>MIIDJzCCApCgAwIBAgIBATANBgkqhkiG9w0BAQQFADCBzjELMAkGA1UEBhMCWkEx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+</ds:X509Certificate>
+            </ds:X509Data>
+            <ds:X509Data>
+               <!-- Thawte Server CA -->
+                <ds:X509Certificate>MIIDEzCCAnygAwIBAgIBATANBgkqhkiG9w0BAQQFADCBxDELMAkGA1UEBhMCWkEx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+</ds:X509Certificate>
+            </ds:X509Data>
+            <ds:X509Data>
+               <!-- Verisign/RSA Commercial CA -->
+                <ds:X509Certificate>MIICIzCCAZACBQJBAAAWMA0GCSqGSIb3DQEBAgUAMFwxCzAJBgNVBAYTAlVTMSAw
+HgYDVQQKExdSU0EgRGF0YSBTZWN1cml0eSwgSW5jLjErMCkGA1UECxMiQ29tbWVy
+Y2lhbCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw05NDExMDQxODU4MzRaFw05
+OTExMDMxODU4MzRaMFwxCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdSU0EgRGF0YSBT
+ZWN1cml0eSwgSW5jLjErMCkGA1UECxMiQ29tbWVyY2lhbCBDZXJ0aWZpY2F0aW9u
+IEF1dGhvcml0eTCBmzANBgkqhkiG9w0BAQEFAAOBiQAwgYUCfgCk+4Fie84QJ93o
+975sbsZwmdu41QUDaSiCnHJ/lj+O7Kwpkj+KFPhCdr69XQO5kNTQvAayUTNfxMK/
+touPmbZiImDd298ggrTKoi8tUO2UMt7gVY3UaOLgTNLNBRYulWZcYVI4HlGogqHE
+7yXpCuaLK44xZtn42f29O2nZ6wIDAQABMA0GCSqGSIb3DQEBAgUAA34AdrW2EP4j
+9/dZYkuwX5zBaLxJu7NJbyFHXSudVMQAKD+YufKKg5tgf+tQx6sFEC097TgCwaVI
+0v5loMC86qYjFmZsGySp8+x5NRhPJsjjr1BKx6cxa9B8GJ1Qv6km+iYrRpwUqbtb
+MJhCKLVLU7tDCZJAuqiqWqTGtotXTcU=
+</ds:X509Certificate>
+            </ds:X509Data>
+            <ds:X509Data>
+               <!-- Verisign/RSA Secure Server CA -->
+                <ds:X509Certificate>MIICNDCCAaECEAKtZn5ORf5eV288mBle3cAwDQYJKoZIhvcNAQECBQAwXzELMAkG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+</ds:X509Certificate>
+            </ds:X509Data>
+            <ds:X509Data>
+               <!-- Ohio State Test CA -->
+                <ds:X509Certificate>MIIEuzCCA6OgAwIBAgIBADANBgkqhkiG9w0BAQQFADCBnzELMAkGA1UEBhMCVVMx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+</ds:X509Certificate>
+            </ds:X509Data>
+            <ds:X509Data>
+               <!-- CREN CA -->
+                <ds:X509Certificate>MIIDozCCAougAwIBAgIFBGAAAAcwDQYJKoZIhvcNAQEEBQAwdDELMAkGA1UEBhMCVVMxOjA4BgNV
+BAoTMUNSRU4vQ29ycCBmb3IgUmVzZWFyY2ggYW5kIEVkdWNhdGlvbmFsIE5ldHdvcmtpbmcxKTAn
+BgNVBAsTIEVkdWNhdGlvbiBhbmQgUmVzZWFyY2ggQ2xpZW50IENBMB4XDTk5MTExNzAwMDAwMFoX
+DTA3MTExNzAwMDAwMFowdDELMAkGA1UEBhMCVVMxOjA4BgNVBAoTMUNSRU4vQ29ycCBmb3IgUmVz
+ZWFyY2ggYW5kIEVkdWNhdGlvbmFsIE5ldHdvcmtpbmcxKTAnBgNVBAsTIEVkdWNhdGlvbiBhbmQg
+UmVzZWFyY2ggQ2xpZW50IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvjqqt68
+M3TOAlTvGsedC5Mo81nlNpukBd95/ZlxZiyQHZzZRN+5ytnl3fFpA9xK47rqfWiEenjotreOlKyv
+kx4FgQsloHL/ngwkn+O7ldRAgsD/1oDy/6TWIL4JvexEWXT/b116aT3QOB4zF77S9+yn6KkFrroL
+mIU+JX6S4G8lMqEFH3tUATwoCVjYeoPtqhgzWhTf2tXQ/tjCFxb8pxav3scG8Adi3iZ7u0TIAq2Z
+5Nf0/xqfUdLNn5GCiK71kxhe7DcaBlxiHs+c3Vo/I47ow1kFWgkOnIwIxa1V/BOzuzgIRfI2jvha
+PLqWRTiC2pWHNfgqmnUf3jQ9JwxsOQIDAQABozwwOjAMBgNVHRMEBTADAQH/MB0GA1UdDgQWBBSZ
+XFkzrbStei+68QrYZGLNXx9BeTALBgNVHQ8EBAMCAAYwDQYJKoZIhvcNAQEEBQADggEBAGWz5Sxw
++XZWYvkdhoM6iZo7XtQqOy34kQsCy4qPk1JxvNIth1ENReDx6v9HiA+5ZMamTr7PRzNxTloyoBMN
+pAK4yPS8Nj/al105jlqLns4cpOOD9Rs0AyhSkvG8F8A6i45UHbSG6rDhH92c/s8/XzZNrHpt/DN6
+XNN0KCzUlDzxEjHiTtf2y88A6FpuhWZlEOtLXSqykhg5RYzbUQyWMPXP2Z2mAJNFQ8kxCaTw8jzj
+EqqiJA+8p/M7Wg2bsyFgikstVIvNyXqt8izHsL3h/ZBTIFIsnFC2XYEGyLWsIXQek1KoCYUyYcUm
+GR2awRTrCl4tbfzIqDv+OvYUoFUuz8Y=
+</ds:X509Certificate>
+            </ds:X509Data>
+            <ds:X509Data>
+               <!-- NSDL CA -->
+                <ds:X509Certificate>MIIDmDCCAwGgAwIBAgIBADANBgkqhkiG9w0BAQQFADCBlTELMAkGA1UEBhMCVVMx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+</ds:X509Certificate>
+            </ds:X509Data>
+            <ds:X509Data>
+               <!-- RSA Secure Server CA -->
+                <ds:X509Certificate>MIICNDCCAaECEAKtZn5ORf5eV288mBle3cAwDQYJKoZIhvcNAQECBQAwXzELMAkG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+</ds:X509Certificate>
+            </ds:X509Data>
         </ds:KeyInfo>
-        <Subject regexp="true">^urn:mace:InCommon:pilot:.+$</Subject>
+        <Subject regexp="true">^urn:mace:incommon:pilot:.+$</Subject>
     </KeyAuthority>
 
 </Trust>