diff options
| author | Ryan Steinmetz <zi@FreeBSD.org> | 2022-11-02 11:58:12 +0000 |
|---|---|---|
| committer | Ryan Steinmetz <zi@FreeBSD.org> | 2022-11-02 11:59:19 +0000 |
| commit | 9507308f89e58d1a6a2b39da5278aa0290d4e276 (patch) | |
| tree | 9dcf99020b7e14258be58807e505a687ff62fd00 | |
| parent | c943a5c42e03201411b8e9598b99a87da33c18c6 (diff) | |
| download | ports-9507308f89e58d1a6a2b39da5278aa0290d4e276.tar.gz ports-9507308f89e58d1a6a2b39da5278aa0290d4e276.zip | |
www/mod_auth_mellon: Add another key block to generated metadata for encryption
Bump PORTREVISION
| -rw-r--r-- | www/mod_auth_mellon/Makefile | 1 | ||||
| -rw-r--r-- | www/mod_auth_mellon/files/patch-mellon__create__metadata.sh | 16 |
2 files changed, 17 insertions, 0 deletions
diff --git a/www/mod_auth_mellon/Makefile b/www/mod_auth_mellon/Makefile index fa1df821885f..4df20ffa0317 100644 --- a/www/mod_auth_mellon/Makefile +++ b/www/mod_auth_mellon/Makefile @@ -1,5 +1,6 @@ PORTNAME= mod_auth_mellon PORTVERSION= 0.18.0 +PORTREVISION= 1 CATEGORIES= www PKGNAMEPREFIX= ${APACHE_PKGNAMEPREFIX} DISTVERSIONPREFIX= v diff --git a/www/mod_auth_mellon/files/patch-mellon__create__metadata.sh b/www/mod_auth_mellon/files/patch-mellon__create__metadata.sh new file mode 100644 index 000000000000..795822006440 --- /dev/null +++ b/www/mod_auth_mellon/files/patch-mellon__create__metadata.sh @@ -0,0 +1,16 @@ +--- mellon_create_metadata.sh.orig 2022-11-02 11:48:53 UTC ++++ mellon_create_metadata.sh +@@ -75,6 +75,13 @@ CERT="$(grep -v '^-----' "$OUTFILE.cert")" + cat >"$OUTFILE.xml" <<EOF + <EntityDescriptor entityID="$ENTITYID" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> + <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true"> ++ <KeyDescriptor use="encryption"> ++ <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> ++ <ds:X509Data> ++ <ds:X509Certificate>$CERT</ds:X509Certificate> ++ </ds:X509Data> ++ </ds:KeyInfo> ++ </KeyDescriptor> + <KeyDescriptor use="signing"> + <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#"> + <ds:X509Data> |