Resolve "Update EMSTSTNU Metadata"

Closes #459 (closed)

nefed.xml

@@ -63,47 +63,34 @@
                     Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
                     Location="https://emststnu.nebraska.edu/Shibboleth.sso/Login" index="1" />
             </Extensions>
-            <KeyDescriptor>
+            <KeyDescriptor use="signing">
                 <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-                    <ds:KeyName>
-                        nesisemstst.uncsdom.uneb.edu</ds:KeyName>
-                    <ds:X509Data>
-                        <ds:X509SubjectName>CN=nesisemstst.uncsdom.uneb.edu</ds:X509SubjectName>
-                        <ds:X509Certificate>
-                            MIIEGzCCAoOgAwIBAgIJANjVKLfATKWaMA0GCSqGSIb3DQEBCwUAMCcxJTAjBgNV
-                            BAMTHG5lc2lzZW1zdHN0LnVuY3Nkb20udW5lYi5lZHUwHhcNMTkwNzI5MTYzNTI3
-                            WhcNMjkwNzI2MTYzNTI3WjAnMSUwIwYDVQQDExxuZXNpc2Vtc3RzdC51bmNzZG9t
-                            LnVuZWIuZWR1MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA0XmL+Yse
-                            Tqfk6zinPuAnnjpJgUUYM+BWKiPR88C7eIcXyWFTdifYo7ba0BpYExDckwwWZmvh
-                            NL+fA+uVKAWjGs0P71TzGnTL7pG63niMWzKhI0FwMJYY9+Sxtd399l/sab+7uAfV
-                            ER4fgZQ+qlRQbT7Cr9w1oJIiUkQd0ED8iGcznNprwMhYzPWmOhg+//CfDZptvy73
-                            YgSzfp5hKNdzMYWR+kSoozYX0QcBdRphA9IXliQAWTV2k0oc5nscIdS7MWJDAPG+
-                            2TMjmQivBbhktgZSNaniTgXTQxGiMCd2bnesH+47BP5vZhIQJ7QbStsQla26Zo42
-                            rEwPq7aofZ9YJdWjWSp/wg0yRzClfHu2qPl0l+lF5kTWhq+fKW6aU3EcbYumdIQQ
-                            eNlvKDoZFm61vminz2KztJOGhPvHDZRiA5qwvbicSuVWbh2MGnRPG1blGjwCtIWK
-                            8tG5LPbmrtIN6+XCz4c+Mxe5nu4YBcSrPh5zIN24IrZ4frFlLOFjNrbvAgMBAAGj
-                            SjBIMCcGA1UdEQQgMB6CHG5lc2lzZW1zdHN0LnVuY3Nkb20udW5lYi5lZHUwHQYD
-                            VR0OBBYEFHS7oqeaoHyaZRzMQBWWOFn9S1DqMA0GCSqGSIb3DQEBCwUAA4IBgQAG
-                            ZGhQtwyVDoaRPsWnXjsrIMtDvjwa5BqQ0zxjR4LAtofCxFSK7fGUroEouGVgSESm
-                            6oZiBkuyq+AFTn/sZl8SUEaY3vs7XSwuCDGjILEIEH+BtfpKIxxW3k3/GgDa5+xD
-                            5iXD5Ri8MPIdW+XarXQ0QmgavICyC/aWXC1MKokBIhTdSMcT5sWOS7UU1zkY8qI4
-                            kviXIa89wKBYtzATYPCiYeaWSBCZ7pt+T7zC95OPgTyL+Y4oaN8yL8Ci8m83ubEG
-                            /5SoQFTBHGzjwz0b6bFn2sXfQcy8kZqH8JRg7BFEbuT4zE7fIz4sMfTzdRjIuFN6
-                            pXUj4iAjAf0UtDyN3xm0mKU+HpW+pHROoBVImbUN1AZmXvBbR116O0S+C1avq/md
-                            stsG0N2RRdXI5MAaAW9YXPIflX+dzi9Pp15h0XlKPjBfGfKSTeAgco893Lva1MGk
-                            WeIbIocUyLiwK6w5mzDsO0ikwWboKlV2wrKhnwHlhMPRVMKG1655pJcgQBoYHy8=
-                        </ds:X509Certificate>
-                    </ds:X509Data>
+                  <ds:KeyName>nesisemststnu.nead.nebraska.edu</ds:KeyName>
+                  <ds:X509Data>
+                    <ds:X509SubjectName>CN=nesisemststnu.nead.nebraska.edu</ds:X509SubjectName>
+                    <ds:X509Certificate>MIIELzCCApegAwIBAgIUYWGHrCytRdgJRliiXctpGA/WdJUwDQYJKoZIhvcNAQEL BQAwKjEoMCYGA1UEAxMfbmVzaXNlbXN0c3RudS5uZWFkLm5lYnJhc2thLmVkdTAe Fw0yNDEwMTYxNTAzNThaFw0zNDEwMTQxNTAzNThaMCoxKDAmBgNVBAMTH25lc2lz ZW1zdHN0bnUubmVhZC5uZWJyYXNrYS5lZHUwggGiMA0GCSqGSIb3DQEBAQUAA4IB jwAwggGKAoIBgQDTxd52dTvyfAZxi6lj1aAU4IZnR3ZP/sNYpaQMzEEAYBH1zAER u00b6NTvIxoFPvFjxB1m8jQe4GdkNxV+RiKwUeAMQ7UCcGrl8QJLTOEnBVOdp3AY SEZboVULWpJKXmWNnj6CUmCtEIE2VJQ30NPEfI8AT9p7f7dKDlwSjbyOstERChsj qTdAEiczLKUKwAGqQm0Y4jO1neOh42Uq7PZTOIM5MN/HHB+0mhUivzpaZPpI1aAf +rghuyh2YqfwNArQXAYQEZKolplvJCZ2XMFWAHZX8oBmr8smCjs5bIg5LNf42emD c0DV+XkTA60NR+fpFe0AYD73JgO9E/BPAFcWMBuUVxsHdqWUkYTMWBTOYmrvg7Lk 3JIoy16XC5Fsk+f9ir2yeVp9Qn19wQD0wPAVfMS93V+heNhyg/b9N6TQz9b+Atu2 CMdFsiRTbISc2Gagwkt44sagjpB7HKYc7ntef9D1LulCVV6Zpb5KZ7UGd64Qh4X6 IHWQhBkP4jq7hNkCAwEAAaNNMEswKgYDVR0RBCMwIYIfbmVzaXNlbXN0c3RudS5u ZWFkLm5lYnJhc2thLmVkdTAdBgNVHQ4EFgQUu5C9nqs3tLDoHLeSaJ0mxVh1NPww DQYJKoZIhvcNAQELBQADggGBACzroW0G7OfyZ8bBRk4njk3GXCxXX9h/1l0TG3zL DZdOvQihN45kzhvQ/xZur+y3m8/7/XSNVnBhNBIU/6Ka668dY4UIBuNbZBcl6Oum Fs8DfocAqwXsg7icW7ZuZjaDmtIcg60RSe8m+UlENg3ysMbdR1zFVvezD9r3tkpF yjRckX5qcpVPmUcwOxXiF+v5I78KasuASwLBzLavwpsmIIE4wpjkXQrses5XeZq3 csq2J+WUAOBh++I+CDJ+gCfmRcoOPZ1m+AHlq48bhur40bpesg6/IY7goJeZobtF RW/CWBPwfJG1fSppiwypV47qaVwHRKdWAnsbKdvp5gYoKsox58YldnZUOsSW0Q5s H0BZhiS7OVWEPLIIECN4cPiAj1gko9HeuNKsjR7ZtvPPk2BXmByss7/vtokXkfcY QKzhrG+z7e2Wiunf/6ZuxIs5e6ECYSYfWlERCtjo9alC0Ey9NK9dPBDx/DKuM/VY o39Zp1FkcsROHgcr4hY+3QUEMA==
+                    </ds:X509Certificate>
+                  </ds:X509Data>
                 </ds:KeyInfo>
-                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm" />
-                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm" />
-                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm" />
-                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" />
-                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc" />
-                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc" />
-                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc" />
-                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" />
-                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p" />
+              </KeyDescriptor>
+              <KeyDescriptor use="encryption">
+                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+                  <ds:KeyName>nesisemststnu.nead.nebraska.edu</ds:KeyName>
+                  <ds:X509Data>
+                    <ds:X509SubjectName>CN=nesisemststnu.nead.nebraska.edu</ds:X509SubjectName>
+                    <ds:X509Certificate>MIIELzCCApegAwIBAgIUBs0ADHI7rBWqdyrSvDhjmj423ZowDQYJKoZIhvcNAQEL BQAwKjEoMCYGA1UEAxMfbmVzaXNlbXN0c3RudS5uZWFkLm5lYnJhc2thLmVkdTAe Fw0yNDEwMTYxNTAzNTVaFw0zNDEwMTQxNTAzNTVaMCoxKDAmBgNVBAMTH25lc2lz ZW1zdHN0bnUubmVhZC5uZWJyYXNrYS5lZHUwggGiMA0GCSqGSIb3DQEBAQUAA4IB jwAwggGKAoIBgQDurnYgyhaCIpPEqFKFtgYBU0HjZgUaGrGV72evEiln1S1FOW3j JDLO3DJEmJBctG+gealP+3OQozGNwExwh1fOQlc51SB19NM4HYE3copxPEBpnAWt lPD3K3LayAVOoXzi6Trhnluu4wvwfc39uSYJoYo/nEOT22lrmY97S7V34F/hRkE0 7fojFvp9Vr472SgKFTZx0d4ZfqmYnOeqJbTQXeiS5xCdBUJRIbtHYevZ+6qR/Tog wSoC+KkExnxxvxxRX9gqOA9EbeDEAuNvM9C/tqZZ5fQyXZQxH6TEu9kkw9WH0ESA 8IxdFhPgxaVZtFcowgUlRNn+z912y5h5KQJNVScNxqXmcPal5dBBr8tCNOwF7Z/D 0zUilylkc49zM3KFNevBgSUsjPxYcwtHxNHOw4zsXMgSHp1l0mUZqJJNcwr0BsRg sdhWx5yEjPKhdamdFH2zzLfCn2RjYuQOJkyVeRyX2mvioGyNhX9RS1Ts4j1I552b zrfj0fpVdNDalhUCAwEAAaNNMEswKgYDVR0RBCMwIYIfbmVzaXNlbXN0c3RudS5u ZWFkLm5lYnJhc2thLmVkdTAdBgNVHQ4EFgQU/j/g5s8cb0c++qxDP9Aiclm2GvEw DQYJKoZIhvcNAQELBQADggGBAL96JIzjtXCoZwZddwFC6OaZYJy2iXqiVQK+gBHw +MquDENkdfKt1vq36+T8/QoJ60G5/ydC669ZhRW59zDdN0ul5k7+F4c2jnse9Upp uryD9kyMAtn3fD4WtK/fWbyJ70vEGx7QzXef0oy9BrPh1E0zbq14Xe9SiF6m0Lop Isangf3A5/2ytTyQy4e+xV+OOmoNR2SjjQmd/5P/qL4jwTOvO+Z+unOHwH0/INVZ phJcsDaSfwcMqbyeuIJaDawdzAxSZmmHcdjbCVoEOdjQ/kvRwVqscnaBGRfHZeV/ jV/fpcjZ/C8aJNJDH7PgMXbt4Mcr0EE7xXguEwlyc3JZKdxq34lfZYUHiqL0dYsP Trwci1j1EG6HBpHMFdZJl9HZRTuIoh8fbjLxLE2soQ5YTigRFAhUfzp7MID/qCt2 6pJnt+bcq6Drkm6JsDC9gmHa48A+epxKRD8C4HjXtFQul768EoQrMRZZwelhoo2B DEEdpNUVdSMUeexXv11DL1rzpw==
+                    </ds:X509Certificate>
+                  </ds:X509Data>
+                </ds:KeyInfo>
+                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
+                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
+                <EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
+                <EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
             </KeyDescriptor>
             <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"
                 Location="https://emststnu.nebraska.edu/Shibboleth.sso/Artifact/SOAP" index="1" />