SWAMID-5001 Updated produktwebb.uu.semd-2024-11-15-v05

1 files changed, 72 insertions, 37 deletions

diff --git a/metadata/swamid-2.0/produktwebb.uu.se-shibboleth.xml b/metadata/swamid-2.0/produktwebb.uu.se-shibboleth.xml
index 6e7b97ba..51cc9ed9 100644
--- a/metadata/swamid-2.0/produktwebb.uu.se-shibboleth.xml
+++ b/metadata/swamid-2.0/produktwebb.uu.se-shibboleth.xml
@@ -13,7 +13,6 @@
     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
     <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
-    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
@@ -23,10 +22,9 @@
     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
     <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
     <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
-    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
     <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
   </md:Extensions>
-  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
     <md:Extensions>
       <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://produktwebb.uu.se/Shibboleth.sso/UU"/>
       <init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://produktwebb.uu.se/Shibboleth.sso/BTH"/>
@@ -51,44 +49,83 @@
         <mdui:PrivacyStatementURL xml:lang="en">https://www.uu.se/medarbetare/ingang/it/behandling-av-personuppgifter/behandling-av-personuppgifter-i-produktwebben</mdui:PrivacyStatementURL>
       </mdui:UIInfo>
     </md:Extensions>
-    <md:KeyDescriptor>
+    <md:KeyDescriptor use="signing">
       <ds:KeyInfo>
-        <ds:KeyName>www.wisum.its.umu.se</ds:KeyName>
         <ds:X509Data>
-          <ds:X509SubjectName>emailAddress=mats.larsson@umu.se,CN=www.wisum.its.umu.se,OU=ITS,O=ITS,L=Umea,ST=Vasterbotten,C=SE</ds:X509SubjectName>
-          <ds:X509Certificate>MIID/DCCAuSgAwIBAgIJAMyGi7RgPxwGMA0GCSqGSIb3DQEBCwUAMIGSMQswCQYD
+          <ds:X509Certificate>MIIGBzCCA++gAwIBAgIUPSltfs1cgVeJNdm7vQKyDpx2FwswDQYJKoZIhvcNAQEL
+BQAwgZIxCzAJBgNVBAYTAlNFMRUwEwYDVQQIDAxWYXN0ZXJib3R0ZW4xDTALBgNV
+BAcMBFVtZWExDDAKBgNVBAoMA0lUUzEMMAoGA1UECwwDSVRTMR0wGwYDVQQDDBR3
+d3cud2lzdW0uaXRzLnVtdS5zZTEiMCAGCSqGSIb3DQEJARYTbWF0cy5sYXJzc29u
+QHVtdS5zZTAeFw0yNDEwMTcxMTI0MjRaFw0zNDEwMTUxMTI0MjRaMIGSMQswCQYD
 VQQGEwJTRTEVMBMGA1UECAwMVmFzdGVyYm90dGVuMQ0wCwYDVQQHDARVbWVhMQww
 CgYDVQQKDANJVFMxDDAKBgNVBAsMA0lUUzEdMBsGA1UEAwwUd3d3Lndpc3VtLml0
-cy51bXUuc2UxIjAgBgkqhkiG9w0BCQEWE21hdHMubGFyc3NvbkB1bXUuc2UwHhcN
-MTkxMTE0MDcwMjA5WhcNMjQxMTEyMDcwMjA5WjCBkjELMAkGA1UEBhMCU0UxFTAT
-BgNVBAgMDFZhc3RlcmJvdHRlbjENMAsGA1UEBwwEVW1lYTEMMAoGA1UECgwDSVRT
-MQwwCgYDVQQLDANJVFMxHTAbBgNVBAMMFHd3dy53aXN1bS5pdHMudW11LnNlMSIw
-IAYJKoZIhvcNAQkBFhNtYXRzLmxhcnNzb25AdW11LnNlMIIBIjANBgkqhkiG9w0B
-AQEFAAOCAQ8AMIIBCgKCAQEAtTmwKWpEx0Tcsg5TaOiOuE/lWh+J2w5k/jOqc/gb
-3h8O9Tui2CHa4Tgi3YgCbOdZ+Cdll3fi+is/8s+gvGciZJyiED6chGF34oW6poda
-nvJWW093brAO4MYEX6WE2HDjAQDDuS3hdD64ModXWLQIH3qJ04eOPTONWAG77Qdk
-YRFfhonMkAmKmsSkTTphkPwA4fZxb16ePXmF7usO+ePBFIbkdmKsoEf5Z2zaijmM
-eSTB4DOp2Ci+sdzQPedo2qIoDvlxxF0KvL693rDgWvcRTzc6hmKZTR0khchnkbVR
-g216wRUk77KjLszhg4cHcdZ4dQbEot8tVzg6Oa42ALx69wIDAQABo1MwUTAdBgNV
-HQ4EFgQU+4zPSL7E8TnPRlush7q41ZAuo1gwHwYDVR0jBBgwFoAU+4zPSL7E8TnP
-Rlush7q41ZAuo1gwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEA
-mU/6aDuW0HD1lAU02TjADs3gGBEqTGnvErx4+91vu4F7p1x4l6VszpvLL0XZpqRz
-BmoN32QebC2c2H0oQKpIr8qYkrwfOIgSNrlgaREjbdZVXUcBvJoFsxRXHDZZOiA7
-+fh3GT5lAM+OKg48hRU3g9877kMH8Tdnjx/limWEmlqyBdfB96kGjgAnc+lf7t1d
-SNV6qe1dcePOFkeMunHzVJq1FO2hK+Javo5dlb+ZAzpu6RRfzeRhFuF+AaWGwoSs
-K2f2yNRzVC/bwROcc9Bdt+te6iXmTgd7lJpaQeNco9vq0Eqd2Sliz5Gye1J6JDC3
-v07igvz+sMQGaroHoRamKg==</ds:X509Certificate>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</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:X509Data>
+          <ds:X509Certificate>MIIGBzCCA++gAwIBAgIUXeCMcVZd7LxutVMnq4vH5yCyc3YwDQYJKoZIhvcNAQEL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</ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
-      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     </md:KeyDescriptor>
     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://produktwebb.uu.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://produktwebb.uu.se/Shibboleth.sso/SLO/Artifact"/>
@@ -99,8 +136,6 @@ v07igvz+sMQGaroHoRamKg==</ds:X509Certificate>
     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://produktwebb.uu.se/Shibboleth.sso/NIM/POST"/>
     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://produktwebb.uu.se/Shibboleth.sso/NIM/Redirect"/>
     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://produktwebb.uu.se/Shibboleth.sso/NIM/SOAP"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://produktwebb.uu.se/Shibboleth.sso/SAML/Artifact" index="6"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://produktwebb.uu.se/Shibboleth.sso/SAML/POST" index="7"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://produktwebb.uu.se/Shibboleth.sso/SAML2/Artifact" index="8"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://produktwebb.uu.se/Shibboleth.sso/SAML2/ECP" index="9"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://produktwebb.uu.se/Shibboleth.sso/SAML2/POST" index="10"/>