blob: d0365c977e093dede3ab607579b79c1b7e940400 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" xmlns:samla="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://misp.cert.sunet.se/shibboleth">
<md:Extensions>
<mdrpi:RegistrationInfo registrationAuthority="http://www.swamid.se/" registrationInstant="2018-09-27T07:35:49Z">
<mdrpi:RegistrationPolicy xml:lang="en">http://swamid.se/policy/mdrps</mdrpi:RegistrationPolicy>
</mdrpi:RegistrationInfo>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224"/>
<alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"/>
<mdattr:EntityAttributes>
<samla:Attribute NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" Name="http://macedir.org/entity-category">
<samla:AttributeValue>http://www.geant.net/uri/dataprotection-code-of-conduct/v1</samla:AttributeValue>
</samla:Attribute>
</mdattr:EntityAttributes>
</md:Extensions>
<md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
<md:Extensions>
<init:RequestInitiator Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://misp.cert.sunet.se/Shibboleth.sso/Login"/>
<idpdisc:DiscoveryResponse Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://misp.cert.sunet.se/Shibboleth.sso/Login" index="1"/>
<mdui:UIInfo>
<mdui:DisplayName xml:lang="sv">SUNET MISP</mdui:DisplayName>
<mdui:DisplayName xml:lang="en">SUNET MISP</mdui:DisplayName>
<mdui:Description xml:lang="sv">MISP tjänst hos SUNET</mdui:Description>
<mdui:Description xml:lang="en">MISP service run by SUNET</mdui:Description>
<mdui:InformationURL xml:lang="en">https://wiki.sunet.se/display/SUNETCERT/MISP</mdui:InformationURL>
<mdui:InformationURL xml:lang="sv">https://wiki.sunet.se/display/SUNETCERT/MISP</mdui:InformationURL>
<mdui:PrivacyStatementURL xml:lang="en">https://wiki.sunet.se/display/SUNETCERT/Data+Protection+Code+of+Conduct</mdui:PrivacyStatementURL>
<mdui:PrivacyStatementURL xml:lang="sv">https://wiki.sunet.se/display/SUNETCERT/Data+Protection+Code+of+Conduct</mdui:PrivacyStatementURL>
</mdui:UIInfo>
</md:Extensions>
<md:KeyDescriptor>
<ds:KeyInfo>
<ds:KeyName>misp</ds:KeyName>
<ds:X509Data>
<ds:X509SubjectName>CN=misp</ds:X509SubjectName>
<ds:X509Certificate>MIID0zCCAjugAwIBAgIJAK+wHHSGPyWEMA0GCSqGSIb3DQEBCwUAMA8xDTALBgNV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</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>
<md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://misp.cert.sunet.se/Shibboleth.sso/Artifact/SOAP" index="1"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://misp.cert.sunet.se/Shibboleth.sso/SLO/SOAP"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://misp.cert.sunet.se/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://misp.cert.sunet.se/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://misp.cert.sunet.se/Shibboleth.sso/SLO/Artifact"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://misp.cert.sunet.se/Shibboleth.sso/SAML2/POST" index="1"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://misp.cert.sunet.se/Shibboleth.sso/SAML2/Artifact" index="2"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://misp.cert.sunet.se/Shibboleth.sso/SAML2/ECP" index="3"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://misp.cert.sunet.se/Shibboleth.sso/SAML/POST" index="4"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://misp.cert.sunet.se/Shibboleth.sso/SAML/Artifact" index="5"/>
<md:AttributeConsumingService index="1">
<md:ServiceName xml:lang="en">CIRCL MISP</md:ServiceName>
<md:ServiceName xml:lang="sv">CIRCL MISP</md:ServiceName>
<md:RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
<md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
</md:AttributeConsumingService>
</md:SPSSODescriptor>
<md:Organization>
<md:OrganizationName xml:lang="en">Swedish University Network</md:OrganizationName>
<md:OrganizationName xml:lang="sv">Svenska Universitetsdatornätverket</md:OrganizationName>
<md:OrganizationDisplayName xml:lang="en">SUNET</md:OrganizationDisplayName>
<md:OrganizationDisplayName xml:lang="sv">SUNET</md:OrganizationDisplayName>
<md:OrganizationURL xml:lang="en">https://www.sunet.se</md:OrganizationURL>
<md:OrganizationURL xml:lang="sv">https://www.sunet.se</md:OrganizationURL>
</md:Organization>
<md:ContactPerson contactType="administrative">
<md:Company>SUNET</md:Company>
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:cert@sunet.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="technical">
<md:Company>SUNET</md:Company>
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:cert@sunet.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson contactType="support">
<md:Company>SUNET</md:Company>
<md:GivenName>Network</md:GivenName>
<md:SurName>Operations</md:SurName>
<md:EmailAddress>mailto:noc@sunet.se</md:EmailAddress>
</md:ContactPerson>
<md:ContactPerson xmlns:remd="http://refeds.org/metadata" contactType="other" remd:contactType="http://refeds.org/metadata/contactType/security">
<md:Company>SUNET</md:Company>
<md:GivenName>Security Response Team</md:GivenName>
<md:EmailAddress>mailto:abuse@sunet.se</md:EmailAddress>
</md:ContactPerson>
</md:EntityDescriptor>
|
