Use complete metadata

9b9327ee · Ryan Rumbaugh · 92913a08 · 9b9327ee
Commit 9b9327ee authored 10 months ago by Ryan Rumbaugh
--- a/nefed.xml
+++ b/nefed.xml
@@ -34769,11 +34769,19 @@ PRD49iI+tL/VkGo=
            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha512" />
            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha384" />
            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" />
+            <alg:DigestMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#sha224" />
            <alg:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" />
+            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha512" />
+            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha384" />
+            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha256" />
+            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha224" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha512" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha384" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" />
+            <alg:SigningMethod Algorithm="http://www.w3.org/2009/xmldsig11#dsa-sha256" />
+            <alg:SigningMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1" />
            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1" />
+            <alg:SigningMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" />
            <mdrpi:RegistrationInfo registrationAuthority="https://nebraska.edu/nefed" />
            <mdattr:EntityAttributes>
                <saml:Attribute Name="http://macedir.org/entity-category"
@@ -34796,9 +34804,10 @@ PRD49iI+tL/VkGo=
            <KeyDescriptor use="signing">
                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                    <ds:KeyName>access.libnova.com</ds:KeyName>
+                    <ds:KeyName>https://access.libnova.com/shibboleth</ds:KeyName>
                    <ds:X509Data>
-                        <ds:X509Certificate>
+                        <ds:X509SubjectName>CN=access.libnova.com</ds:X509SubjectName>
-                            MIIELzCCApegAwIBAgIUWRy0Im8Xh7pylJWbtwjtRvx3Bz0wDQYJKoZIhvcNAQEL
+                        <ds:X509Certificate>MIIELzCCApegAwIBAgIUWRy0Im8Xh7pylJWbtwjtRvx3Bz0wDQYJKoZIhvcNAQEL
                            BQAwHTEbMBkGA1UEAxMSYWNjZXNzLmxpYm5vdmEuY29tMB4XDTIwMDkwOTExMzQz
                            N1oXDTMwMDkwNzExMzQzN1owHTEbMBkGA1UEAxMSYWNjZXNzLmxpYm5vdmEuY29t
                            MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAmYHffkCCf9W4If0rDJkG
@@ -34828,45 +34837,54 @@ PRD49iI+tL/VkGo=
            <KeyDescriptor use="encryption">
                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                    <ds:KeyName>access.libnova.com</ds:KeyName>
-                    <ds:X509Data>
+                    <ds:KeyName>https://access.libnova.com/shibboleth</ds:KeyName>
-                        <ds:X509Certificate>
+                    <ds:X509Data>
-                            MIIELzCCApegAwIBAgIUWRy0Im8Xh7pylJWbtwjtRvx3Bz0wDQYJKoZIhvcNAQEL
+                        <ds:X509SubjectName>CN=access.libnova.com</ds:X509SubjectName>
-                            BQAwHTEbMBkGA1UEAxMSYWNjZXNzLmxpYm5vdmEuY29tMB4XDTIwMDkwOTExMzQz
+                        <ds:X509Certificate>MIIELzCCApegAwIBAgIUfWgwBkl8xksgeZCaGDTr5a6TS5gwDQYJKoZIhvcNAQEL
-                            N1oXDTMwMDkwNzExMzQzN1owHTEbMBkGA1UEAxMSYWNjZXNzLmxpYm5vdmEuY29t
+                            BQAwHTEbMBkGA1UEAxMSYWNjZXNzLmxpYm5vdmEuY29tMB4XDTIwMDkwOTExMzcw
-                            MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAmYHffkCCf9W4If0rDJkG
+                            MloXDTMwMDkwNzExMzcwMlowHTEbMBkGA1UEAxMSYWNjZXNzLmxpYm5vdmEuY29t
-                            iOERBF6LK/R2tI7uI9cV2w0rsqLpVT9h6HH+ZZb9YPj6yva5nkefWvkvO7L+LJhc
+                            MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAv5eZagBTOuXy0f1qlerx
-                            AefDrHp91APJ6G2XfMzQNrxyq0NV3V6wM6hr/mvp81DR2LpYspOdF9c+PRm6EMs8
+                            cy96gdcERn6YaTd6aP9juOuJkvRkKUapZ4NVKVjT7wUp5fJ8pYVM/uCczo5W8Wyn
-                            MS5zN7j79MG7JderKeCN1JtPlOX1NbRoDsiXk9YKXSwL5d/jvAyo16NYhNCITcdQ
+                            qLTLtzURwUEkWCkRenMNvTMH46bKdOFC8u7DEnnvpHzDaUNM58uZpUux97xpCMEc
-                            P0gGmsFRfrZTXzXBv2Vv2Hg1Vx7p3uQ9StX8P9r8pznlJFK9xXg6eq7v75Mui+fx
+                            pJE0Wsr/xlmTJn6/WSOa0U1VMvEELnfmrBjtMT2FJNDV0gTcw/MODImVRq6SKfz1
-                            KG3jZouvDZuiRqufraXVNS0zgoqzaMyVjVffWT/P/xG0z/CnvUi2Wf+MYRcOVUFc
+                            lOD2f+Cl5/XLxKGjRTZ5i65m+Po2SqKsDFGWaoZCm5tKZfPKd3UmhXN0iDSUFkfz
-                            onbo9okMKKbVtBCiwoYG54bRt1B4gWTlr9ZrMqVK0GiB2IffqEn7wY49ZEAwWkWo
+                            zDwUMChWgMMnMuujMjfufAeMYn1KL0zfGujVt4Yn0Vxzhr/BbWZL7kUfUvLTqEK8
-                            qFFpIkAtszI1AOYghUD0r7RkjbnIlR4Z8zf7dLYqAXc9o70tDkjeqNZtUvVZXBt0
+                            NsIeTFbNXQnmBqbAvHbJuG6tRsXbU7RxIgctKvWrQlN1Wef6p1M6RcZPLrYMyEBz
-                            zfJbc7R0vKYEtw0m5RqSSXancmrPLO55rgsdD9ZVOSmxAgMBAAGjZzBlMEQGA1Ud
+                            J+8T9QaK0SGmhIsP4jyAlFc9KphhLxM3zoL78YFjH9p3T2AqEjZWCLcVcMPvR6pY
+                            rhUnL7Hlze82bFaJYR2yz1aDYLSBHi0RBukcyisH/PsjAgMBAAGjZzBlMEQGA1Ud
                            EQQ9MDuCEmFjY2Vzcy5saWJub3ZhLmNvbYYlaHR0cHM6Ly9hY2Nlc3MubGlibm92
-                            YS5jb20vc2hpYmJvbGV0aDAdBgNVHQ4EFgQUYOY2PE1ItINjiDw19meTEnFm0BMw
+                            YS5jb20vc2hpYmJvbGV0aDAdBgNVHQ4EFgQUjKhvAVksA+03z3KE3GqVdUnrRqww
-                            DQYJKoZIhvcNAQELBQADggGBACskdrEKqwJRM9yTj3tUgbdFVz1DOWP3VwCb/RNA
+                            DQYJKoZIhvcNAQELBQADggGBACPEgywVmb7l/tU/qV2+r6CHfszOtovrY5QdvwvI
-                            KDuOjSDRJDJ5nc+DZdG0vCrMMFnXQHTAxKhujI8mywyOMhtp1/xBXntuii//+B4M
+                            /sh9XkdDSNpC7wbF44M0E9f6SFOFBmgDBzA0loV/+D4x6e7w2h1qsN5r0wm4wRsX
-                            h0Zs0ocTPX2krLndGd5ysHsby5v2iINfHt4sYtW3iqv/at5IByT/dAhKWvnjzqBU
+                            oBz5u9lFBqXjJ0e9+A30f7OvXwYLgrK5J4ipOx+2FPdcsLP8irxm6Y2UfpkDn8Y2
-                            icjDyiqKwnicyoHZN1F42cln2LvRftIqz3SYLwilHeL/xyy0hZRft58tjGSuO/Co
+                            egkX4R3LBX0ZDGbNcKel5e0ovA7r5yhJ/axhCnT2GVRPn818BZxCEpCyVx0ww/Fy
-                            HNrYWXYAsGC7wN4XL3DUdIksJmLM7kDyZHBUQAV9nJPUs9oltJIrKFUwdqX1kgsO
+                            OqQmpRdQw68nBRQ9XelOnvbmQQENvK0e/j10n0QoGoDQNjdroH1UWPKIqQuzuSHx
-                            B3lf54LEU9RiSgE28ZyXw7X4gRTuSni+JMAXyZO8qou/fw7oTTnxPMYbZIGbGJT4
+                            0djZYOhz7Cmujfd9oNR1XP//nO9ZZkvvU5ETbbBPjYtXG93TFQRrnhNOd/kOVOPO
-                            +UZXea6Ffsrd09IG2DUK1GarhUmKuyQNxdaJXLKxOc92xrNtL+hn+Cq4wdrLXiRh
+                            GTrbtXvt7P2IS0JcX5VSEAv5nbbz3hbtF9xaJ9No3x8Qmr6U4UIFN7vx9fX+gEQQ
-                            tjvqf2dWNArMWg2fbZi9RLy6A37vr6BZofsR+/wS3oOOdLNOAh9JVFzW4OZRMa1J
+                            I+e0OVeXUm31poZD/7HZxi04yxkP5JEhX1HvaqSRAzHeW+qYgUGWlPfFtBXhYk17
-                            L6poBMb96iQBy8MHI4uW3km0Nw==
+                            cy+XljuxZO3xnVMr7iqaoLh3Zg==
    </ds:X509Certificate>
                    </ds:X509Data>
                </ds:KeyInfo>
+                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" />
+                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm" />
+                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm" />
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" />
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc" />
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc" />
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
+                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" />
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" />
            </KeyDescriptor>
-            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://access.libnova.com/Shibboleth.sso/SLO/R..." />
+            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://access.libnova.com/Shibboleth.sso/Artifact/SOAP" index="1" />
-            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://access.libnova.com/Shibboleth.sso/SLO/R..." />
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://access.libnova.com/Shibboleth.sso/SLO/SOAP" />
-            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</NameIDFormat>
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://access.libnova.com/Shibboleth.sso/SLO/POST" />
-            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://access.libnova.com/Shibboleth.sso" index="1" />
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://access.libnova.com/Shibboleth.sso/SLO/Artifact" />
-            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://access.libnova.com/Shibboleth.sso/SAML2..." index="2" />
+            <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://access.libnova.com/Shibboleth.sso/SLO/Redirect" />
-            <AttributeConsumingService index="1">
+            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://access.libnova.com/Shibboleth.sso/SAML2/POST" index="1" />
-                <ServiceName xml:lang="en">Libnova Access</ServiceName>
+            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://access.libnova.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2" />
-                <RequestedAttribute Name="urn:oid:0.9.2342.19200300.100.1.1" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" />
+            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://access.libnova.com/Shibboleth.sso/SAML2/Artifact" index="3" />
-                <RequestedAttribute Name="urn:oid:2.5.4.4" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" />
+            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://access.libnova.com/Shibboleth.sso/SAML2/ECP" index="4" />
-            </AttributeConsumingService>
        </SPSSODescriptor>
        <Organization>
            <OrganizationName xml:lang="en-US">Libnova LIBSAFE Go</OrganizationName>