From d93af8b413ea24bbae86027ff13160c7ccdf311d Mon Sep 17 00:00:00 2001
From: Johan Wassberg <jocar@sunet.se>
Date: Wed, 24 Aug 2022 12:14:56 +0200
Subject: SWAMID-1194: Added wireguard.lan.kth.se

---
 swamid-2.0/wireguard.lan.kth.se-shibboleth.xml | 165 +++++++++++++++++++++++++
 swamid-sp-2.0.mxml                             |   1 +
 2 files changed, 166 insertions(+)
 create mode 100644 swamid-2.0/wireguard.lan.kth.se-shibboleth.xml

diff --git a/swamid-2.0/wireguard.lan.kth.se-shibboleth.xml b/swamid-2.0/wireguard.lan.kth.se-shibboleth.xml
new file mode 100644
index 00000000..3568d87d
--- /dev/null
+++ b/swamid-2.0/wireguard.lan.kth.se-shibboleth.xml
@@ -0,0 +1,165 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+This is example metadata only. Do *NOT* supply it as is without review,
+and do *NOT* provide it in real time to your partners.
+ -->
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://wireguard.lan.kth.se/shibboleth">
+  <md:Extensions>
+    <mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2022-08-24T12:14:05Z">
+      <mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
+    </mdrpi:RegistrationInfo>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
+    <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
+    <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
+    <mdattr:EntityAttributes xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute">
+      <samla:Attribute xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" Name="http://macedir.org/entity-category" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
+        <samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
+      </samla:Attribute>
+    </mdattr:EntityAttributes>
+  </md:Extensions>
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/Login"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/Login" index="1"/>
+      <mdui:UIInfo>
+        <mdui:DisplayName xml:lang="en">Wireguard</mdui:DisplayName>
+        <mdui:Description xml:lang="en">Wireguard</mdui:Description>
+        <mdui:Keywords xml:lang="en">Wireguard</mdui:Keywords>
+        <mdui:InformationURL xml:lang="en">https://www.lan.kth.se/vpn/vpn.html</mdui:InformationURL>
+        <mdui:PrivacyStatementURL xml:lang="en">https://intra.kth.se/en/it/natverk/regler-policys/policy-for-hantering-av-personuppgifter-inom-ramen-for-identitetsutgivaren-identity-provider-idp-som-faststallts-av-kungliga-tekniska-hogskolan-1.924071</mdui:PrivacyStatementURL>
+        <mdui:DisplayName xml:lang="sv">Wireguard</mdui:DisplayName>
+        <mdui:Description xml:lang="sv">Wireguard</mdui:Description>
+        <mdui:Keywords xml:lang="sv">Wireguard</mdui:Keywords>
+        <mdui:PrivacyStatementURL xml:lang="sv">https://intra.kth.se/it/natverk/regler-policys/policy-for-hantering-av-personuppgifter-inom-ramen-for-identitetsutgivaren-identity-provider-idp-som-faststallts-av-kungliga-tekniska-hogskolan-1.924071</mdui:PrivacyStatementURL>
+        <mdui:InformationURL xml:lang="sv">https://www.lan.kth.se/vpn/vpn.html</mdui:InformationURL>
+      </mdui:UIInfo>
+    </md:Extensions>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo>
+        <ds:KeyName>wireguard-1.lan.kth.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=wireguard-1.lan.kth.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIEFDCCAnygAwIBAgIURpdWd5Gzc7XaimvJXtWw2BlupFYwDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:KeyDescriptor use="encryption">
+      <ds:KeyInfo>
+        <ds:KeyName>wireguard-1.lan.kth.se</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=wireguard-1.lan.kth.se</ds:X509SubjectName>
+          <ds:X509Certificate>MIIEFDCCAnygAwIBAgIUbXbSu3S5oruZSOzhKJnkLpE9DYkwDQYJKoZIhvcNAQEL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+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+      <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/SLO/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://wireguard-1.lan.kth.se/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AttributeConsumingService index="1">
+      <md:ServiceName xml:lang="en">Wireguard</md:ServiceName>
+      <md:ServiceName xml:lang="sv">Wireguard</md:ServiceName>
+      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+      <md:RequestedAttribute FriendlyName="eduPersonScopedAffiliation" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
+    </md:AttributeConsumingService>
+  </md:SPSSODescriptor>
+  <md:Organization>
+    <md:OrganizationName xml:lang="en">Royal Institute of Technology</md:OrganizationName>
+    <md:OrganizationName xml:lang="sv">Kungliga Tekniska högskolan</md:OrganizationName>
+    <md:OrganizationDisplayName xml:lang="sv">KTH</md:OrganizationDisplayName>
+    <md:OrganizationDisplayName xml:lang="en">KTH</md:OrganizationDisplayName>
+    <md:OrganizationURL xml:lang="en">https://www.kth.se/en</md:OrganizationURL>
+    <md:OrganizationURL xml:lang="sv">https://www.kth.se/</md:OrganizationURL>
+  </md:Organization>
+  <md:ContactPerson contactType="administrative">
+    <md:Company>Kungliga Tekniska högskolan</md:Company>
+    <md:GivenName>Hans</md:GivenName>
+    <md:SurName>Åkerman</md:SurName>
+    <md:EmailAddress>mailto:hakerman@kth.se</md:EmailAddress>
+    <md:TelephoneNumber>+4687906000</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="technical">
+    <md:Company>Kungliga Tekniska högskolan</md:Company>
+    <md:GivenName>Hans</md:GivenName>
+    <md:SurName>Akerman</md:SurName>
+    <md:EmailAddress>mailto:hakerman@kth.se</md:EmailAddress>
+    <md:TelephoneNumber>+4687906000</md:TelephoneNumber>
+  </md:ContactPerson>
+  <md:ContactPerson contactType="support">
+    <md:Company>Kungliga Tekniska högskolan</md:Company>
+    <md:GivenName>IT-Support</md:GivenName>
+    <md:EmailAddress>mailto:it-support@kth.se</md:EmailAddress>
+    <md:TelephoneNumber>+46 8 790 6600</md:TelephoneNumber>
+  </md:ContactPerson>
+</md:EntityDescriptor>
diff --git a/swamid-sp-2.0.mxml b/swamid-sp-2.0.mxml
index c01416d7..3d2b8657 100644
--- a/swamid-sp-2.0.mxml
+++ b/swamid-sp-2.0.mxml
@@ -652,4 +652,5 @@
   <xi:include href="swamid-2.0/medlem.ntkumea.se-auth-saml-metadata.xml"/>
   <xi:include href="swamid-2.0/se-hh-shibboleth.moveon4.de-shibboleth.xml"/>
   <xi:include href="swamid-2.0/kaucat.sai.kau.se-shibboleth.xml"/>
+  <xi:include href="swamid-2.0/wireguard.lan.kth.se-shibboleth.xml"/>
 </md:EntitiesDescriptor>
-- 
cgit v1.2.3