http://mds.edugain.org into swamid-interfederations-2.0

1 files changed, 40 insertions, 66 deletions

diff --git a/swamid-interfederations-2.0/sgw.garr.it.xml b/swamid-interfederations-2.0/sgw.garr.it.xml
index 97f15c38..617e8dc0 100644
--- a/swamid-interfederations-2.0/sgw.garr.it.xml
+++ b/swamid-interfederations-2.0/sgw.garr.it.xml
@@ -7,7 +7,8 @@
   </Extensions>
   <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
     <md:Extensions>
-      <DiscoveryResponse xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://sgw.garr.it/Shibboleth.sso/DS" index="1"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sgw.garr.it/Shibboleth.sso/DS"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://sgw.garr.it/Shibboleth.sso/DS" index="1"/>
       <mdui:UIInfo>
         <mdui:DisplayName xml:lang="it">GARR - Science Gateway</mdui:DisplayName>
         <mdui:Description xml:lang="it">Questo servizio permette di eseguire applicazioni scientifiche appartenenti a domini diversi su risorse di calcolo e di storage distribuite sul territorio italiano e in altre regioni del mondo. Attraverso il GARR Science Gateway, gli utenti possono accedere in maniera trasparente ed uniforme a risorse locali, grid e cloud
@@ -19,87 +20,60 @@
         <mdui:InformationURL xml:lang="en">http://sgw.garr.it</mdui:InformationURL>
       </mdui:UIInfo>
     </md:Extensions>
-    <md:KeyDescriptor use="signing">
+    <md:KeyDescriptor>
       <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>sg-liferay.garr.it</ds:KeyName>
         <ds:KeyName>sgw.garr.it</ds:KeyName>
         <ds:X509Data>
-          <ds:X509SubjectName>CN=sgw.garr.it</ds:X509SubjectName>
-          <ds:X509Certificate>
-                            MIIEXTCCA0WgAwIBAgIQWujYl4SUR3QcC4FsP9F0yTANBgkqhkiG9w0BAQUFADA2
-                            MQswCQYDVQQGEwJOTDEPMA0GA1UEChMGVEVSRU5BMRYwFAYDVQQDEw1URVJFTkEg
-                            U1NMIENBMB4XDTEzMDEzMDAwMDAwMFoXDTE2MDEzMDIzNTk1OVowPTELMAkGA1UE
-                            BhMCSVQxGDAWBgNVBAoTD0NvbnNvcnRpdW0gR0FSUjEUMBIGA1UEAxMLc2d3Lmdh
-                            cnIuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1uz7FWOS0k5y
-                            xcB9Ac60XgUBnXPC7MXiHLvDhpJpQHHGz1awLAuOr/WvqJxJ6ZwpD2sU72bt44GF
-                            uqlmdg2waASa/xDKP3oPGgnC7ximlK1UAQ/fbcSnjBprgRHZeJyQxndf1EGtC4zB
-                            qSi3yNprVqZsysw/7ew/KIMQ8un/a1ULfOfNedzIx1RXZeN85Hk+BQWxfuKkcLA+
-                            BRg5WuOP/7N/l9KGkDGmTsTsGkcGBUVtsKycIGUis9D4ZxpD7eYG66StcQE+uTnG
-                            37Yahsq9mELkWxBWy3HdxvEnNHtcqucuWS0YGaZMIYddeDd5IxZfzOq/WKkMggAF
-                            3alpftPFAgMBAAGjggFeMIIBWjAfBgNVHSMEGDAWgBQMvZNoDPPeq6NJays3V0fq
-                            kOO57TAdBgNVHQ4EFgQU88beKAx83mumGu58e947oiBNXbQwDgYDVR0PAQH/BAQD
-                            AgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
-                            MBgGA1UdIAQRMA8wDQYLKwYBBAGyMQECAh0wOgYDVR0fBDMwMTAvoC2gK4YpaHR0
-                            cDovL2NybC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5jcmwwbQYIKwYBBQUH
-                            AQEEYTBfMDUGCCsGAQUFBzAChilodHRwOi8vY3J0LnRjcy50ZXJlbmEub3JnL1RF
-                            UkVOQVNTTENBLmNydDAmBggrBgEFBQcwAYYaaHR0cDovL29jc3AudGNzLnRlcmVu
-                            YS5vcmcwFgYDVR0RBA8wDYILc2d3LmdhcnIuaXQwDQYJKoZIhvcNAQEFBQADggEB
-                            AH7+kdSsi31EBdjCDpBgnGpN37P/6ZlHhbRMMx4O0xtC6PIiGIvqW45DUFcPXkpb
-                            C4LZ3lqpz5oTI1l+E/7pWH7c7+xSKucqiwABtbTn4EteSfeZ4R58A0QXwKclwHwU
-                            TsaqtOwB/U2i0a9l/P5cL4fz7wFcREAPLsm6FVY5ZJP2aAAZEQO3C8tXuwym5oXB
-                            /W5PcRc2PRNAR0ZXuB5CQVNVEbqkHMXsNfVh5Lmr8TtdN9bkDUQYQmHKf4ynfEY4
-                            F/KOSR7Wtz++Fh/cG44uZgU7G7VdMUjmHVPSgwnqmYR56oXPkRmkloq25Qy0/moN
-                            GApBYHSfMtsnpP9U+0RncPM=
-                        </ds:X509Certificate>
-        </ds:X509Data>
-      </ds:KeyInfo>
-    </md:KeyDescriptor>
-    <md:KeyDescriptor use="encryption">
-      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-        <ds:KeyName>sgw.garr.it</ds:KeyName>
-        <ds:X509Data>
-          <ds:X509SubjectName>CN=sgw.garr.it</ds:X509SubjectName>
-          <ds:X509Certificate>
-                            MIIEXTCCA0WgAwIBAgIQWujYl4SUR3QcC4FsP9F0yTANBgkqhkiG9w0BAQUFADA2
-                            MQswCQYDVQQGEwJOTDEPMA0GA1UEChMGVEVSRU5BMRYwFAYDVQQDEw1URVJFTkEg
-                            U1NMIENBMB4XDTEzMDEzMDAwMDAwMFoXDTE2MDEzMDIzNTk1OVowPTELMAkGA1UE
-                            BhMCSVQxGDAWBgNVBAoTD0NvbnNvcnRpdW0gR0FSUjEUMBIGA1UEAxMLc2d3Lmdh
-                            cnIuaXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1uz7FWOS0k5y
-                            xcB9Ac60XgUBnXPC7MXiHLvDhpJpQHHGz1awLAuOr/WvqJxJ6ZwpD2sU72bt44GF
-                            uqlmdg2waASa/xDKP3oPGgnC7ximlK1UAQ/fbcSnjBprgRHZeJyQxndf1EGtC4zB
-                            qSi3yNprVqZsysw/7ew/KIMQ8un/a1ULfOfNedzIx1RXZeN85Hk+BQWxfuKkcLA+
-                            BRg5WuOP/7N/l9KGkDGmTsTsGkcGBUVtsKycIGUis9D4ZxpD7eYG66StcQE+uTnG
-                            37Yahsq9mELkWxBWy3HdxvEnNHtcqucuWS0YGaZMIYddeDd5IxZfzOq/WKkMggAF
-                            3alpftPFAgMBAAGjggFeMIIBWjAfBgNVHSMEGDAWgBQMvZNoDPPeq6NJays3V0fq
-                            kOO57TAdBgNVHQ4EFgQU88beKAx83mumGu58e947oiBNXbQwDgYDVR0PAQH/BAQD
-                            AgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
-                            MBgGA1UdIAQRMA8wDQYLKwYBBAGyMQECAh0wOgYDVR0fBDMwMTAvoC2gK4YpaHR0
-                            cDovL2NybC50Y3MudGVyZW5hLm9yZy9URVJFTkFTU0xDQS5jcmwwbQYIKwYBBQUH
-                            AQEEYTBfMDUGCCsGAQUFBzAChilodHRwOi8vY3J0LnRjcy50ZXJlbmEub3JnL1RF
-                            UkVOQVNTTENBLmNydDAmBggrBgEFBQcwAYYaaHR0cDovL29jc3AudGNzLnRlcmVu
-                            YS5vcmcwFgYDVR0RBA8wDYILc2d3LmdhcnIuaXQwDQYJKoZIhvcNAQEFBQADggEB
-                            AH7+kdSsi31EBdjCDpBgnGpN37P/6ZlHhbRMMx4O0xtC6PIiGIvqW45DUFcPXkpb
-                            C4LZ3lqpz5oTI1l+E/7pWH7c7+xSKucqiwABtbTn4EteSfeZ4R58A0QXwKclwHwU
-                            TsaqtOwB/U2i0a9l/P5cL4fz7wFcREAPLsm6FVY5ZJP2aAAZEQO3C8tXuwym5oXB
-                            /W5PcRc2PRNAR0ZXuB5CQVNVEbqkHMXsNfVh5Lmr8TtdN9bkDUQYQmHKf4ynfEY4
-                            F/KOSR7Wtz++Fh/cG44uZgU7G7VdMUjmHVPSgwnqmYR56oXPkRmkloq25Qy0/moN
-                            GApBYHSfMtsnpP9U+0RncPM=
+          <ds:X509SubjectName>CN=sg-liferay.garr.it,OU=Domain Control Validated,DC=tcs,DC=terena,DC=org</ds:X509SubjectName>
+          <ds:X509Certificate>MIIE6DCCA9CgAwIBAgIQDb4u4turk6L4quPPEEv+kjANBgkqhkiG9w0BAQUFADA/
+                            MQswCQYDVQQGEwJOTDEPMA0GA1UEChMGVEVSRU5BMR8wHQYDVQQDExZURVJFTkEg
+                            ZVNjaWVuY2UgU1NMIENBMB4XDTEzMTIxMzAwMDAwMFoXDTE1MDExMjIzNTk1OVow
+                            gYIxEzARBgoJkiaJk/IsZAEZFgNvcmcxFjAUBgoJkiaJk/IsZAEZFgZ0ZXJlbmEx
+                            EzARBgoJkiaJk/IsZAEZFgN0Y3MxITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZh
+                            bGlkYXRlZDEbMBkGA1UEAxMSc2ctbGlmZXJheS5nYXJyLml0MIIBIjANBgkqhkiG
+                            9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBpspPbjl5JERSur4StdxTTFFaObxEY/opI9
+                            17VRD4KmiPcPfbSUYEfgI4h1e6fSylMwg2sVws1uISJm9mYrzFivRX62N92ALgfS
+                            nUn8/YOryuRaGUi2VWD2k93uP0wwY+4uOj0my0KWKI5maZ22pTyzjTmq+vmm9IQL
+                            T1e4SInE/p1KQQYdmdeQ1IHu/M0yxOuo6evQ6o4x6asDFXYiAc8n/KJbZmwj7y9b
+                            3pVH3Ra5v8dmvlEaii17T7UdyKL4y+70Wntm6gU4vAaGwVn9r7V9hbbIPbK8jndO
+                            fjlXa5ze2naHKqTcIpWAYx787G333EviWMlMZwUB+GaEN4R76wIDAQABo4IBmjCC
+                            AZYwHwYDVR0jBBgwFoAUI9OXvcDYoZRhiA2Ftsx1n8l5O5IwHQYDVR0OBBYEFDrj
+                            WiJIiSmHLfoC++tXo3MW9s0iMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAA
+                            MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAwBgNVHSAEKTAnMA0GCysG
+                            AQQBsjEBAgIdMAwGCiqGSIb3TAUCAgEwCAYGZ4EMAQIBMEIGA1UdHwQ7MDkwN6A1
+                            oDOGMWh0dHA6Ly9jcmwudGNzLnRlcmVuYS5vcmcvVEVSRU5BZVNjaWVuY2VTU0xD
+                            QS5jcmwwdQYIKwYBBQUHAQEEaTBnMD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LnRj
+                            cy50ZXJlbmEub3JnL1RFUkVOQWVTY2llbmNlU1NMQ0EuY3J0MCYGCCsGAQUFBzAB
+                            hhpodHRwOi8vb2NzcC50Y3MudGVyZW5hLm9yZzAqBgNVHREEIzAhghJzZy1saWZl
+                            cmF5LmdhcnIuaXSCC3Nndy5nYXJyLml0MA0GCSqGSIb3DQEBBQUAA4IBAQBfUy8v
+                            GupDJmcDTmNSx5kse8NfmSB1kbwM96IE7Eap+/VgNiIeOwjAyfK2gafLfD4QCYao
+                            1WQvBPqoqY3h14Wsbl5SRRRS+G6oj4x51YVvm7D6kgh4E5wlqfMPbDsZtGnkfh/m
+                            ZsTEL1Ixz6dT6PSzsqu5tPa9RnwNtBL+rRCW7OUfs6MPxofNmu+GCry8/6gZy2Rd
+                            yxyH2bHQkbZCMSil/2cvX/3ib2mg+eYrlZQywmRtWL92UtJoKlt96K1RYUKXdfIq
+                            Pm6o7CRIyLzXCIKWimG/PIPiJ0GNH1K2+X54yM/tV+bsjBCHlQe8RpUVKxzm5dtG
+                            zkkOSinydr85B7LG
                         </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
     </md:KeyDescriptor>
     <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sgw.garr.it/Shibboleth.sso/Artifact/SOAP" index="1"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sgw.garr.it/Shibboleth.sso/SLO/SOAP"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sgw.garr.it/Shibboleth.sso/SLO/Redirect"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sgw.garr.it/Shibboleth.sso/SLO/POST"/>
     <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sgw.garr.it/Shibboleth.sso/SLO/Artifact"/>
-    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sgw.garr.it/Shibboleth.sso/NIM/SOAP"/>
-    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sgw.garr.it/Shibboleth.sso/NIM/Redirect"/>
-    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sgw.garr.it/Shibboleth.sso/NIM/POST"/>
-    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sgw.garr.it/Shibboleth.sso/NIM/Artifact"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sgw.garr.it/Shibboleth.sso/SAML2/POST" index="1"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sgw.garr.it/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sgw.garr.it/Shibboleth.sso/SAML2/Artifact" index="3"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://sgw.garr.it/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sgw.garr.it/Shibboleth.sso/SAML/POST" index="5"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sgw.garr.it/Shibboleth.sso/SAML/Artifact" index="6"/>
     <md:AttributeConsumingService index="1">
       <md:ServiceName xml:lang="it">GARR Science Gateway</md:ServiceName>
       <md:ServiceName xml:lang="en">GARR Science Gateway</md:ServiceName>