From 77bba8b62a59884086b63a5becc53cd53d9049fb Mon Sep 17 00:00:00 2001
From: Fredrik Domeij <fredrik.domeij@umu.se>
Date: Wed, 29 Jan 2020 18:28:10 +0100
Subject: RT2656: additional cert for www.diva-portal.org

---
 swamid-2.0/www.diva-portal.org-shibboleth.xml | 30 ++++++++++++++++++++++++++-
 1 file changed, 29 insertions(+), 1 deletion(-)

diff --git a/swamid-2.0/www.diva-portal.org-shibboleth.xml b/swamid-2.0/www.diva-portal.org-shibboleth.xml
index c8a47ccd..33771b48 100644
--- a/swamid-2.0/www.diva-portal.org-shibboleth.xml
+++ b/swamid-2.0/www.diva-portal.org-shibboleth.xml
@@ -12,6 +12,7 @@
     </mdattr:EntityAttributes>
   </md:Extensions>
   <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+    <!-- Old cert -->
     <md:KeyDescriptor use="signing">
       <ds:KeyInfo>
         <ds:KeyName>www.diva-portal.org</ds:KeyName>
@@ -38,6 +39,7 @@ H5e8OA==
         </ds:X509Data>
       </ds:KeyInfo>
     </md:KeyDescriptor>
+    <!-- Old cert -->
     <md:KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:KeyName>www.diva-portal.org</ds:KeyName>
@@ -60,6 +62,33 @@ dIEDJtDobA2HT+i6/A2uK2JR7DzpWw2RcG+iCrNmMI9L2YXIs+p5CjS32Pdmn77B
 2C9DSmBXboPTPxfmIOo1S6B4ZEtJ7W2s425lx38v4oEo+TspFAqzTDs8+fTw9/aa
 J1z0kVcxmvNLpIVh3rlkUQvNycE22FMDlp6sDtIn/KaODR5hKSGHT2Cdk4tpktkh
 H5e8OA==
+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <!-- New cert -->
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:KeyName>www.diva-portal.org</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=www.diva-portal.org</ds:X509SubjectName>
+          <ds:X509Certificate>MIIDADCCAeigAwIBAgIJALdZfAj+jDVcMA0GCSqGSIb3DQEBBQUAMB4xHDAaBgNV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 </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
@@ -73,7 +102,6 @@ H5e8OA==
     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.diva-portal.org/Shibboleth.sso/NIM/POST"/>
     <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.diva-portal.org/Shibboleth.sso/NIM/Artifact"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.diva-portal.org/Shibboleth.sso/SAML2/POST" index="1"/>
-    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://www.diva-portal.org/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.diva-portal.org/Shibboleth.sso/SAML2/Artifact" index="3"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://www.diva-portal.org/Shibboleth.sso/SAML2/ECP" index="4"/>
     <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://www.diva-portal.org/Shibboleth.sso/SAML/POST" index="5"/>
-- 
cgit v1.2.3