From 8be7b0414dc19cca7b892deeccc64b5fcedaf62c Mon Sep 17 00:00:00 2001
From: Benjamin Dauvergne <bdauvergne@entrouvert.com>
Date: Thu, 14 Apr 2011 16:45:43 +0200
Subject: [core] add flags parameter to lasso_server_load_metadata to tune
 signature checking on metadata files

The flags parameter allows to control the checking of digital signature
upon EntityDescriptor and EntitiesDescriptor nodes in SAML 2.0 metadata
files.

The default behaviour is to check all found signatures and to inherit
signature from EntitiesDescriptor to their children.

By only enabling checking of EntityDescrtiptor node signatures it's also
possible to only check signature at the EntityDescriptor level and so
only trust individual entities and not the aggregating provider.
---
 tests/data/renater-metadata.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'tests/data')

diff --git a/tests/data/renater-metadata.xml b/tests/data/renater-metadata.xml
index 7a9ff7da..1f8bce66 100644
--- a/tests/data/renater-metadata.xml
+++ b/tests/data/renater-metadata.xml
@@ -12,7 +12,7 @@
 </ds:Reference>
 </ds:SignedInfo>
 <ds:SignatureValue>
-X1YhQCh7ZYc4dN36bWBYviDKxxfishiqMdF3E7PNLYLxCK8wZL58dOvNVnYTJ1CkKa2iFp9Tejyc
+1YhQCh7ZYc4dN36bWBYviDKxxfishiqMdF3E7PNLYLxCK8wZL58dOvNVnYTJ1CkKa2iFp9Tejyc
 4DRkvzU6vGSGsX2M6k92ON16zanpekHgjFMv4DvtPevRyYHJaeoOzE/6k0Es1kIvbsYMWrVWZdsO
 XNRvItqOZdBBWNyxXsQ=
 </ds:SignatureValue>
@@ -27411,4 +27411,4 @@ cHF5
 
 
 
-</EntitiesDescriptor>
\ No newline at end of file
+</EntitiesDescriptor>
-- 
cgit