RubyGems - rack-saml - Versions diffs - 0.0.3 → 0.0.4 - Mend

rack-saml 0.0.3 → 0.0.4

Files changed (17) hide show

data/bin/conv_metadata.rb +3 -2
data/lib/rack-saml/version.rb +1 -1
data/rack-saml.gemspec +2 -1
data/spec/fixtures/config_idp.yml +13 -0
data/spec/fixtures/config_sp.yml +13 -0
data/spec/fixtures/conv_metadata_test.rb +20 -0
data/spec/fixtures/idp_cert.pem +22 -0
data/spec/fixtures/idp_key.pem +27 -0
data/spec/fixtures/metadata-with-newline.xml +169 -0
data/spec/fixtures/metadata-without-newline.xml +112 -0
data/spec/fixtures/metadata.xml +109 -0
data/spec/fixtures/sp_cert.pem +22 -0
data/spec/fixtures/sp_key.pem +27 -0
data/spec/fixtures/test.pem +3 -0
data/spec/fixtures/test.yml +18 -0
data/spec/fixtures/test2.pem +20 -0
metadata +43 -6

data/bin/conv_metadata.rb CHANGED Viewed

@@ -32,7 +32,8 @@ def create_entity_hash(elem, list_type)
       puts "specified metadata has an IdP without certificate!"
       exit 1
     end
-    certificate = "-----BEGIN CERTIFICATE-----#{cert_elem.text.gsub(/\s+$/, "")}\n-----END CERTIFICATE-----"
+    # Cert must be split to 64 char lines (else OpenSSL gives "nested asn1" error)
+    certificate = "-----BEGIN CERTIFICATE-----\n#{cert_elem.text.gsub(/\s+/, "").scan(/.{1,64}/).join("\n")}\n-----END CERTIFICATE-----"
     saml2_http_redirect = nil
     idp_elem.elements.find_all {|el| el.has_name?("SingleSignOnService")}.each do |e|
       if e.attributes["Binding"] == "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
@@ -47,7 +48,7 @@ def create_entity_hash(elem, list_type)
     # the first certificate is used
     # permit a SP without a certificate
     cert_elem = REXML::XPath.first(sp_elem, './/ds:X509Certificate', 'ds' => DS)
-    certificate = cert_elem.nil? ? "" : "-----BEGIN CERTIFICATE-----\n#{cert_elem.text.gsub(/\s+$/, "")}\n-----END CERTIFICATE-----"
+    certificate = cert_elem.nil? ? "" : "-----BEGIN CERTIFICATE-----\n#{cert_elem.text.gsub(/\s+/, "").scan(/.{1,64}/).join("\n")}\n-----END CERTIFICATE-----"
     saml2_http_post = nil
     sp_elem.elements.find_all {|el| el.has_name?("AssertionConsumerService")}.each do |e|
       if e.attributes["Binding"] == "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

data/lib/rack-saml/version.rb CHANGED Viewed

@@ -1,6 +1,6 @@
 require 'rack'
 module Rack
   module Saml
-    VERSION = "0.0.3"
+    VERSION = "0.0.4"
   end
 end

data/rack-saml.gemspec CHANGED Viewed

@@ -2,7 +2,8 @@
 require File.expand_path('../lib/rack-saml/version', __FILE__)
 Gem::Specification.new do |gem|
-  gem.add_dependency 'ruby-saml', '~> 0.4.7'
+  gem.add_dependency 'ruby-saml', '~> 0.5.2'
+  gem.add_development_dependency 'rspec'
   gem.authors       = ["Toyokazu Akiyama"]
   gem.email         = ["toyokazu@gmail.com"]

data/spec/fixtures/config_idp.yml ADDED Viewed

@@ -0,0 +1,13 @@
+---
+key_type: rsa
+key_size: 2048
+random_files:
+- /etc/
+key_file: idp_key.pem
+req_file: idp_cert.pem
+req_type: x509
+req_days: 3650
+cert_descriptions:
+  O: Test Certificate
+  OU: Test IdP
+  CN: idp.example.com

data/spec/fixtures/config_sp.yml ADDED Viewed

@@ -0,0 +1,13 @@
+---
+key_type: rsa
+key_size: 2048
+random_files:
+- /etc/
+key_file: sp_key.pem
+req_file: sp_cert.pem
+req_type: x509
+req_days: 3650
+cert_descriptions:
+  O: Test Certificate
+  OU: Test SP
+  CN: sp.example.com

data/spec/fixtures/conv_metadata_test.rb ADDED Viewed

@@ -0,0 +1,20 @@
+#!/usr/bin/env ruby
+require 'yaml'
+require 'openssl'
+path = File.expand_path("../", __FILE__)
+system("/usr/bin/env ruby #{ENV["HOME"]}/.rvm/gems/ruby-1.9.3-p125@rack-saml/gems/rack-saml-0.0.3/bin/conv_metadata.rb #{path}/metadata-without-newline.xml > test.yml")
+#system("/usr/bin/env ruby #{ENV["HOME"]}/Documents/devel/projects/rack-saml/bin/conv_metadata.rb #{path}/metadata-without-newline.xml > test.yml")
+#system("/usr/bin/env ruby #{ENV["HOME"]}/Documents/devel/projects/rack-saml/bin/conv_metadata.rb #{path}/metadata-with-newline.xml > test.yml")
+yaml = YAML.load_file("test.yml")
+f = open("test.pem", "w")
+f.puts yaml["idp_lists"]["https://idp.example.com/idp/shibboleth"]["certificate"]
+f.close
+exit 1
+#begin
+  puts OpenSSL::X509::Certificate.new(yaml["idp_lists"]["https://idp.example.com/idp/shibboleth"]["certificate"])
+  puts OpenSSL::X509::Certificate.new(yaml["sp_lists"]["https://sp.example.com/shibboleth"]["certificate"])
+#rescue OpenSSL::X509::CertificateError => error
+#  puts error.class, "#{error.message}", error.backtrace
+#end

data/spec/fixtures/idp_cert.pem ADDED Viewed

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/fixtures/idp_key.pem ADDED Viewed

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/fixtures/metadata-with-newline.xml ADDED Viewed

@@ -0,0 +1,169 @@
+<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" Name="Test">
+<EntityDescriptor ID="PI0030JP" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://idp.example.com/idp/shibboleth">
+    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+        <Extensions>
+            <shibmd:Scope regexp="false">example.com</shibmd:Scope>
+        </Extensions>
+        <KeyDescriptor>
+            <ds:KeyInfo>
+                <ds:X509Data>
+                  <ds:X509Certificate>
+                    MIIDozCCAougAwIBAgIJAM4RrKvcNVYiMA0GCSqGSIb3DQEBBQUAMGgxCzAJBgNV
+                    BAYTAkpQMREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZp
+                    Y2F0ZTERMA8GA1UECwwIVGVzdCBJZFAxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmNv
+                    bTAeFw0xMjA0MTMwMzMxMjNaFw0xMjA1MTMwMzMxMjNaMGgxCzAJBgNVBAYTAkpQ
+                    MREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZpY2F0ZTER
+                    MA8GA1UECwwIVGVzdCBJZFAxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmNvbTCCASIw
+                    DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQTaONZxbLElsl5wr7UdV6YpsV2
+                    1wTe5GOUja7D+mcct8TJLcFu7m/OaK3qlsGYL0IdrTOHbhjgJlWzb03eIbFxFDuo
+                    rDBnDVSoi2k917DJyBx4lUng+28EAqCUhuXv41XbX30ILL7CO1DxQ6UBhOYgGTx0
+                    SbNhOQsdWojJlDuRA9IG2s2dg9KWkT9j9t29OftR8Y6OVmui6MdLOgXHT3NARFN9
+                    sHYFbOntFZjRbp70c+wzIOZVF0bmq4UFyLp8xQVdKlNz6oo/QAVgTA9NMG3hhrY3
+                    6hsFuAHBCbAadKhQMIit3KWbBSb1TyprO3iW/lftIti9XAaX/L+RSH4FvqsCAwEA
+                    AaNQME4wHQYDVR0OBBYEFAQBsI28WO2nZomTF4wO183+mJ13MB8GA1UdIwQYMBaA
+                    FAQBsI28WO2nZomTF4wO183+mJ13MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEF
+                    BQADggEBAEkmE0x1kqejIDD/f/xc17hnqw3NnrO++gmV2qI32dXRD/fwuf4mP4DS
+                    Cin1B/8+OYLyJqMYR4eYPFlusM4FnbsETzcdjXWBBzYqdyNAyj1VLeDarAIM2oFr
+                    c3p4EMzciK45e4tj7Td5Od//5LOQZPn3uFaFcEiK8fT8Zv9QZMJhw2ZuY7+dGhJu
+                    IU1ECYI3U2UM0o70uuAsI4vLleB40t/CfL0c2l6/dCkouNa5I1r9P1kgIIrAUMtj
+                    xBgAziCRHiU9WXEYXW6lKEFD5O2ZaElQPQf1CCCRCxPIgk8VupTE00cUTD6LzaNg
+                    ugi1RlXP1NCK8NmORZQLEg7n38vHCiI=
+                  </ds:X509Certificate>
+                </ds:X509Data>
+              </ds:KeyInfo>
+        </KeyDescriptor>
+        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.example.com:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.example.com:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.example.com/idp/profile/Shibboleth/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.example.com/idp/profile/SAML2/POST/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.example.com/idp/profile/SAML2/POST-SimpleSign/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.example.com/idp/profile/SAML2/Redirect/SSO"/>
+    </IDPSSODescriptor>
+    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+        <Extensions>
+            <shibmd:Scope regexp="false">ac.jp</shibmd:Scope>
+        </Extensions>
+        <KeyDescriptor>
+            <ds:KeyInfo>
+                <ds:X509Data>
+                  <ds:X509Certificate>
+                    MIIDozCCAougAwIBAgIJAM4RrKvcNVYiMA0GCSqGSIb3DQEBBQUAMGgxCzAJBgNV
+                    BAYTAkpQMREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZp
+                    Y2F0ZTERMA8GA1UECwwIVGVzdCBJZFAxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmNv
+                    bTAeFw0xMjA0MTMwMzMxMjNaFw0xMjA1MTMwMzMxMjNaMGgxCzAJBgNVBAYTAkpQ
+                    MREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZpY2F0ZTER
+                    MA8GA1UECwwIVGVzdCBJZFAxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmNvbTCCASIw
+                    DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQTaONZxbLElsl5wr7UdV6YpsV2
+                    1wTe5GOUja7D+mcct8TJLcFu7m/OaK3qlsGYL0IdrTOHbhjgJlWzb03eIbFxFDuo
+                    rDBnDVSoi2k917DJyBx4lUng+28EAqCUhuXv41XbX30ILL7CO1DxQ6UBhOYgGTx0
+                    SbNhOQsdWojJlDuRA9IG2s2dg9KWkT9j9t29OftR8Y6OVmui6MdLOgXHT3NARFN9
+                    sHYFbOntFZjRbp70c+wzIOZVF0bmq4UFyLp8xQVdKlNz6oo/QAVgTA9NMG3hhrY3
+                    6hsFuAHBCbAadKhQMIit3KWbBSb1TyprO3iW/lftIti9XAaX/L+RSH4FvqsCAwEA
+                    AaNQME4wHQYDVR0OBBYEFAQBsI28WO2nZomTF4wO183+mJ13MB8GA1UdIwQYMBaA
+                    FAQBsI28WO2nZomTF4wO183+mJ13MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEF
+                    BQADggEBAEkmE0x1kqejIDD/f/xc17hnqw3NnrO++gmV2qI32dXRD/fwuf4mP4DS
+                    Cin1B/8+OYLyJqMYR4eYPFlusM4FnbsETzcdjXWBBzYqdyNAyj1VLeDarAIM2oFr
+                    c3p4EMzciK45e4tj7Td5Od//5LOQZPn3uFaFcEiK8fT8Zv9QZMJhw2ZuY7+dGhJu
+                    IU1ECYI3U2UM0o70uuAsI4vLleB40t/CfL0c2l6/dCkouNa5I1r9P1kgIIrAUMtj
+                    xBgAziCRHiU9WXEYXW6lKEFD5O2ZaElQPQf1CCCRCxPIgk8VupTE00cUTD6LzaNg
+                    ugi1RlXP1NCK8NmORZQLEg7n38vHCiI=
+                    </ds:X509Certificate>
+                  </ds:X509Data>
+            </ds:KeyInfo>
+        </KeyDescriptor>
+        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.example.com:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.example.com:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
+        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    </AttributeAuthorityDescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">Local IdP</OrganizationName>
+    <OrganizationName xml:lang="ja">ローカルIdP</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">Local IdP</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="ja">ローカルIdP</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://www.example.com/</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="technical">
+    <GivenName>User</GivenName>
+    <SurName>Test</SurName>
+    <EmailAddress>test@example.com</EmailAddress>
+  </ContactPerson>
+  </EntityDescriptor>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_cebe60aa72b70c850c1ecc6caca16d74ed0bc858" entityID="https://sp.example.com/shibboleth">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp.example.com/Shibboleth.sso/Login"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp.example.com/Shibboleth.sso/DS"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://sp.example.com/Shibboleth.sso/DS" index="1"/>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>sp.example.com</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=sp.example.com,OU=Test SP,O=Test Certificate</ds:X509SubjectName>
+          <ds:X509Certificate>
+                    MIIDnzCCAoegAwIBAgIJAOibZtWndr86MA0GCSqGSIb3DQEBBQUAMGYxCzAJBgNV
+                    BAYTAkpQMREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZp
+                    Y2F0ZTEQMA4GA1UECwwHVGVzdCBTUDEXMBUGA1UEAwwOc3AuZXhhbXBsZS5jb20w
+                    HhcNMTIwNDEzMDMzMjI1WhcNMTIwNTEzMDMzMjI1WjBmMQswCQYDVQQGEwJKUDER
+                    MA8GA1UEBwwIQWNhZGVtZTIxGTAXBgNVBAoMEFRlc3QgQ2VydGlmaWNhdGUxEDAO
+                    BgNVBAsMB1Rlc3QgU1AxFzAVBgNVBAMMDnNwLmV4YW1wbGUuY29tMIIBIjANBgkq
+                    hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34MFSNC1wGMrBp/OyzoNFwiDIpmri3BS
+                    NbPbmeFKhJfukwAwyYRxhGAz/OQAxruS0DriQ73RcSe6f0WEW+URKkdgx+MiUHgh
+                    yqNtVjlhNhRSL19kVdddBkFtNSh0/2iA384x0PcXIpfEB9jonX25LGQN9GJWPHam
+                    ievkj4MwI0cwU4mC9Su8kD2BSccoNpb68pwEI+JizFXTSe9IcA1tJvvxmkecVCTZ
+                    hS2ztbSm24PUlu7igWruVH/jqtj3YeJMZvKgj6NiwdXOL6+hVuJKO/eNB96yztH3
+                    v4KSb3JEE2/2w6K5FSX8qsKDZ/VAq7FRXOwRKYdaX2pNMgWtvr0T/wIDAQABo1Aw
+                    TjAdBgNVHQ4EFgQUhxf8wd5vCyK8bdWCB2ZkmJwW5F4wHwYDVR0jBBgwFoAUhxf8
+                    wd5vCyK8bdWCB2ZkmJwW5F4wDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOC
+                    AQEAzdQxcUNXP4izy2Yoz2yUlmt5jjQX89uRxrGv6Hf11D3vxiZz4Srxzi8v2Pz7
+                    7A3Q7qqrIlV6uXj0WvojnalNl2ExY/a1WRz4tO8aI6WsQ7T97UZ2tlJEvR65htIb
+                    M27x3j7Ui6xlNcGsm6hlMsm7jUF9oPC2xrSc+sk1ggANkKTpZ/Ui2dkKutLTPMa5
+                    KUGkZGOUMrv0xxkUC6zp4bQb6t++4YL4pkY7s+PVOYjZmM1ARM2QP/O6ZeSLe4LQ
+                    NQS8WfRq0dmNk/QKOqTLIH7ppDar6i7oc1m+sJ+zskhTZnYWzUk6STa6uAfWJ3Z7
+                    ILRuorZXobhI0ENI4hv2yYEsWQ==
+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.example.com/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/SLO/Artifact"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/NIM/SOAP"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.example.com/Shibboleth.sso/NIM/Redirect"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/NIM/POST"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/NIM/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sp.example.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://sp.example.com/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sp.example.com/Shibboleth.sso/SAML/POST" index="5"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sp.example.com/Shibboleth.sso/SAML/Artifact" index="6"/>
+  </md:SPSSODescriptor>
+</md:EntityDescriptor>
+</EntitiesDescriptor>

data/spec/fixtures/metadata-without-newline.xml ADDED Viewed

@@ -0,0 +1,112 @@
+<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" Name="Test">
+<EntityDescriptor ID="PI0030JP" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://idp.example.com/idp/shibboleth">
+    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+        <Extensions>
+            <shibmd:Scope regexp="false">example.com</shibmd:Scope>
+        </Extensions>
+        <KeyDescriptor>
+            <ds:KeyInfo>
+                <ds:X509Data>
+                  <ds:X509Certificate>
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
+                  </ds:X509Certificate>
+                </ds:X509Data>
+              </ds:KeyInfo>
+        </KeyDescriptor>
+        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.example.com:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.example.com:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.example.com/idp/profile/Shibboleth/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.example.com/idp/profile/SAML2/POST/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.example.com/idp/profile/SAML2/POST-SimpleSign/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.example.com/idp/profile/SAML2/Redirect/SSO"/>
+    </IDPSSODescriptor>
+    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+        <Extensions>
+            <shibmd:Scope regexp="false">example.com</shibmd:Scope>
+        </Extensions>
+        <KeyDescriptor>
+            <ds:KeyInfo>
+                <ds:X509Data>
+                  <ds:X509Certificate>
+MIIDozCCAougAwIBAgIJAM4RrKvcNVYiMA0GCSqGSIb3DQEBBQUAMGgxCzAJBgNVBAYTAkpQMREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZpY2F0ZTERMA8GA1UECwwIVGVzdCBJZFAxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmNvbTAeFw0xMjA0MTMwMzMxMjNaFw0xMjA1MTMwMzMxMjNaMGgxCzAJBgNVBAYTAkpQMREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZpY2F0ZTERMA8GA1UECwwIVGVzdCBJZFAxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQTaONZxbLElsl5wr7UdV6YpsV21wTe5GOUja7D+mcct8TJLcFu7m/OaK3qlsGYL0IdrTOHbhjgJlWzb03eIbFxFDuorDBnDVSoi2k917DJyBx4lUng+28EAqCUhuXv41XbX30ILL7CO1DxQ6UBhOYgGTx0SbNhOQsdWojJlDuRA9IG2s2dg9KWkT9j9t29OftR8Y6OVmui6MdLOgXHT3NARFN9sHYFbOntFZjRbp70c+wzIOZVF0bmq4UFyLp8xQVdKlNz6oo/QAVgTA9NMG3hhrY36hsFuAHBCbAadKhQMIit3KWbBSb1TyprO3iW/lftIti9XAaX/L+RSH4FvqsCAwEAAaNQME4wHQYDVR0OBBYEFAQBsI28WO2nZomTF4wO183+mJ13MB8GA1UdIwQYMBaAFAQBsI28WO2nZomTF4wO183+mJ13MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAEkmE0x1kqejIDD/f/xc17hnqw3NnrO++gmV2qI32dXRD/fwuf4mP4DSCin1B/8+OYLyJqMYR4eYPFlusM4FnbsETzcdjXWBBzYqdyNAyj1VLeDarAIM2oFrc3p4EMzciK45e4tj7Td5Od//5LOQZPn3uFaFcEiK8fT8Zv9QZMJhw2ZuY7+dGhJuIU1ECYI3U2UM0o70uuAsI4vLleB40t/CfL0c2l6/dCkouNa5I1r9P1kgIIrAUMtjxBgAziCRHiU9WXEYXW6lKEFD5O2ZaElQPQf1CCCRCxPIgk8VupTE00cUTD6LzaNgugi1RlXP1NCK8NmORZQLEg7n38vHCiI=
+                  </ds:X509Certificate>
+                  </ds:X509Data>
+            </ds:KeyInfo>
+        </KeyDescriptor>
+        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.example.com:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.example.com:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
+        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    </AttributeAuthorityDescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">Local IdP</OrganizationName>
+    <OrganizationName xml:lang="ja">ローカルIdP</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">Local IdP</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="ja">ローカルIdP</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://www.example.com/</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="technical">
+    <GivenName>User</GivenName>
+    <SurName>Test</SurName>
+    <EmailAddress>test@example.com</EmailAddress>
+  </ContactPerson>
+  </EntityDescriptor>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_cebe60aa72b70c850c1ecc6caca16d74ed0bc858" entityID="https://sp.example.com/shibboleth">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp.example.com/Shibboleth.sso/Login"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp.example.com/Shibboleth.sso/DS"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://sp.example.com/Shibboleth.sso/DS" index="1"/>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>sp.example.com</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=sp.example.com,OU=Test SP,O=Test Certificate</ds:X509SubjectName>
+          <ds:X509Certificate>
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
+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.example.com/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/SLO/Artifact"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/NIM/SOAP"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.example.com/Shibboleth.sso/NIM/Redirect"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/NIM/POST"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/NIM/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sp.example.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://sp.example.com/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sp.example.com/Shibboleth.sso/SAML/POST" index="5"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sp.example.com/Shibboleth.sso/SAML/Artifact" index="6"/>
+  </md:SPSSODescriptor>
+</md:EntityDescriptor>
+</EntitiesDescriptor>

data/spec/fixtures/metadata.xml ADDED Viewed

@@ -0,0 +1,109 @@
+<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" Name="Test">
+<EntityDescriptor ID="PI0030JP" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://idp.example.com/idp/shibboleth">
+    <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+        <Extensions>
+            <shibmd:Scope regexp="false">example.com</shibmd:Scope>
+        </Extensions>
+        <KeyDescriptor>
+            <ds:KeyInfo>
+                <ds:X509Data>
+                  <ds:X509Certificate>
+                  </ds:X509Certificate>
+                </ds:X509Data>
+              </ds:KeyInfo>
+        </KeyDescriptor>
+        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.example.com:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
+        <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.example.com:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
+        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+        <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.example.com/idp/profile/Shibboleth/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.example.com/idp/profile/SAML2/POST/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.example.com/idp/profile/SAML2/POST-SimpleSign/SSO"/>
+        <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.example.com/idp/profile/SAML2/Redirect/SSO"/>
+    </IDPSSODescriptor>
+    <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
+        <Extensions>
+            <shibmd:Scope regexp="false">ac.jp</shibmd:Scope>
+        </Extensions>
+        <KeyDescriptor>
+            <ds:KeyInfo>
+                <ds:X509Data>
+                    <ds:X509Certificate>
+                    </ds:X509Certificate>
+                  </ds:X509Data>
+            </ds:KeyInfo>
+        </KeyDescriptor>
+        <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.example.com:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
+        <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.example.com:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
+        <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
+        <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
+    </AttributeAuthorityDescriptor>
+  <Organization>
+    <OrganizationName xml:lang="en">Local IdP</OrganizationName>
+    <OrganizationName xml:lang="ja">ローカルIdP</OrganizationName>
+    <OrganizationDisplayName xml:lang="en">Local IdP</OrganizationDisplayName>
+    <OrganizationDisplayName xml:lang="ja">ローカルIdP</OrganizationDisplayName>
+    <OrganizationURL xml:lang="en">http://www.example.com/</OrganizationURL>
+  </Organization>
+  <ContactPerson contactType="technical">
+    <GivenName>User</GivenName>
+    <SurName>Test</SurName>
+    <EmailAddress>test@example.com</EmailAddress>
+  </ContactPerson>
+  </EntityDescriptor>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="_cebe60aa72b70c850c1ecc6caca16d74ed0bc858" entityID="https://sp.example.com/shibboleth">
+  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:1.0:protocol">
+    <md:Extensions>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp.example.com/Shibboleth.sso/Login"/>
+      <init:RequestInitiator xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Binding="urn:oasis:names:tc:SAML:profiles:SSO:request-init" Location="https://sp.example.com/Shibboleth.sso/DS"/>
+      <idpdisc:DiscoveryResponse xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" Location="https://sp.example.com/Shibboleth.sso/DS" index="1"/>
+    </md:Extensions>
+    <md:KeyDescriptor>
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:KeyName>sp.example.com</ds:KeyName>
+        <ds:X509Data>
+          <ds:X509SubjectName>CN=sp.example.com,OU=Test SP,O=Test Certificate</ds:X509SubjectName>
+          <ds:X509Certificate>
+</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/Artifact/SOAP" index="1"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.example.com/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/SLO/Artifact"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://sp.example.com/Shibboleth.sso/NIM/SOAP"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://sp.example.com/Shibboleth.sso/NIM/Redirect"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/NIM/POST"/>
+    <md:ManageNameIDService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/NIM/Artifact"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://sp.example.com/Shibboleth.sso/SAML2/POST" index="1"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://sp.example.com/Shibboleth.sso/SAML2/POST-SimpleSign" index="2"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://sp.example.com/Shibboleth.sso/SAML2/Artifact" index="3"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="https://sp.example.com/Shibboleth.sso/SAML2/ECP" index="4"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sp.example.com/Shibboleth.sso/SAML/POST" index="5"/>
+    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sp.example.com/Shibboleth.sso/SAML/Artifact" index="6"/>
+  </md:SPSSODescriptor>
+</md:EntityDescriptor>
+</EntitiesDescriptor>

data/spec/fixtures/sp_cert.pem ADDED Viewed

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/fixtures/sp_key.pem ADDED Viewed

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/fixtures/test.pem ADDED Viewed

@@ -0,0 +1,3 @@
+-----BEGIN CERTIFICATE-----
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
+-----END CERTIFICATE-----

data/spec/fixtures/test.yml ADDED Viewed

@@ -0,0 +1,18 @@
+---
+idp_lists:
+  https://idp.example.com/idp/shibboleth:
+    certificate: ! '-----BEGIN CERTIFICATE-----
+      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
+      -----END CERTIFICATE-----'
+    saml2_http_redirect: https://idp.example.com/idp/profile/SAML2/Redirect/SSO
+sp_lists:
+  https://sp.example.com/shibboleth:
+    certificate: ! '-----BEGIN CERTIFICATE-----
+      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
+      -----END CERTIFICATE-----'
+    saml2_http_post: https://sp.example.com/Shibboleth.sso/SAML2/POST

data/spec/fixtures/test2.pem ADDED Viewed

@@ -0,0 +1,20 @@
+    MIIDozCCAougAwIBAgIJAM4RrKvcNVYiMA0GCSqGSIb3DQEBBQUAMGgxCzAJBgNV
+    BAYTAkpQMREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZp
+    Y2F0ZTERMA8GA1UECwwIVGVzdCBJZFAxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmNv
+    bTAeFw0xMjA0MTMwMzMxMjNaFw0xMjA1MTMwMzMxMjNaMGgxCzAJBgNVBAYTAkpQ
+    MREwDwYDVQQHDAhBY2FkZW1lMjEZMBcGA1UECgwQVGVzdCBDZXJ0aWZpY2F0ZTER
+    MA8GA1UECwwIVGVzdCBJZFAxGDAWBgNVBAMMD2lkcC5leGFtcGxlLmNvbTCCASIw
+    DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQTaONZxbLElsl5wr7UdV6YpsV2
+    1wTe5GOUja7D+mcct8TJLcFu7m/OaK3qlsGYL0IdrTOHbhjgJlWzb03eIbFxFDuo
+    rDBnDVSoi2k917DJyBx4lUng+28EAqCUhuXv41XbX30ILL7CO1DxQ6UBhOYgGTx0
+    SbNhOQsdWojJlDuRA9IG2s2dg9KWkT9j9t29OftR8Y6OVmui6MdLOgXHT3NARFN9
+    sHYFbOntFZjRbp70c+wzIOZVF0bmq4UFyLp8xQVdKlNz6oo/QAVgTA9NMG3hhrY3
+    6hsFuAHBCbAadKhQMIit3KWbBSb1TyprO3iW/lftIti9XAaX/L+RSH4FvqsCAwEA
+    AaNQME4wHQYDVR0OBBYEFAQBsI28WO2nZomTF4wO183+mJ13MB8GA1UdIwQYMBaA
+    FAQBsI28WO2nZomTF4wO183+mJ13MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEF
+    BQADggEBAEkmE0x1kqejIDD/f/xc17hnqw3NnrO++gmV2qI32dXRD/fwuf4mP4DS
+    Cin1B/8+OYLyJqMYR4eYPFlusM4FnbsETzcdjXWBBzYqdyNAyj1VLeDarAIM2oFr
+    c3p4EMzciK45e4tj7Td5Od//5LOQZPn3uFaFcEiK8fT8Zv9QZMJhw2ZuY7+dGhJu
+    IU1ECYI3U2UM0o70uuAsI4vLleB40t/CfL0c2l6/dCkouNa5I1r9P1kgIIrAUMtj
+    xBgAziCRHiU9WXEYXW6lKEFD5O2ZaElQPQf1CCCRCxPIgk8VupTE00cUTD6LzaNg
+    ugi1RlXP1NCK8NmORZQLEg7n38vHCiI=

metadata CHANGED Viewed

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rack-saml
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.0.4
   prerelease:
 platform: ruby
 authors:
@@ -9,19 +9,30 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2012-04-10 00:00:00.000000000 Z
+date: 2012-04-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ruby-saml
-  requirement: &70354144248580 !ruby/object:Gem::Requirement
+  requirement: &70289036886900 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
       - !ruby/object:Gem::Version
-        version: 0.4.7
+        version: 0.5.2
   type: :runtime
   prerelease: false
-  version_requirements: *70354144248580
+  version_requirements: *70289036886900
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: &70289036886520 !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: *70289036886520
 description: SAML middleware for Rack (using ruby-saml)
 email:
 - toyokazu@gmail.com
@@ -55,6 +66,19 @@ files:
 - rack-saml.gemspec
 - Rakefile
 - README.md
+- spec/fixtures/config_idp.yml
+- spec/fixtures/config_sp.yml
+- spec/fixtures/conv_metadata_test.rb
+- spec/fixtures/idp_cert.pem
+- spec/fixtures/idp_key.pem
+- spec/fixtures/metadata-with-newline.xml
+- spec/fixtures/metadata-without-newline.xml
+- spec/fixtures/metadata.xml
+- spec/fixtures/sp_cert.pem
+- spec/fixtures/sp_key.pem
+- spec/fixtures/test.pem
+- spec/fixtures/test.yml
+- spec/fixtures/test2.pem
 homepage: ''
 licenses: []
 post_install_message:
@@ -79,4 +103,17 @@ rubygems_version: 1.8.17
 signing_key:
 specification_version: 3
 summary: SAML middleware for Rack (using ruby-saml)
-test_files: []
+test_files:
+- spec/fixtures/config_idp.yml
+- spec/fixtures/config_sp.yml
+- spec/fixtures/conv_metadata_test.rb
+- spec/fixtures/idp_cert.pem
+- spec/fixtures/idp_key.pem
+- spec/fixtures/metadata-with-newline.xml
+- spec/fixtures/metadata-without-newline.xml
+- spec/fixtures/metadata.xml
+- spec/fixtures/sp_cert.pem
+- spec/fixtures/sp_key.pem
+- spec/fixtures/test.pem
+- spec/fixtures/test.yml
+- spec/fixtures/test2.pem