git: 9507308f89e5 - main - www/mod_auth_mellon: Add another key block to generated metadata for encryption
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 02 Nov 2022 11:59:23 UTC
The branch main has been updated by zi:
URL: https://cgit.FreeBSD.org/ports/commit/?id=9507308f89e58d1a6a2b39da5278aa0290d4e276
commit 9507308f89e58d1a6a2b39da5278aa0290d4e276
Author: Ryan Steinmetz <zi@FreeBSD.org>
AuthorDate: 2022-11-02 11:58:12 +0000
Commit: Ryan Steinmetz <zi@FreeBSD.org>
CommitDate: 2022-11-02 11:59:19 +0000
www/mod_auth_mellon: Add another key block to generated metadata for encryption
Bump PORTREVISION
---
www/mod_auth_mellon/Makefile | 1 +
.../files/patch-mellon__create__metadata.sh | 16 ++++++++++++++++
2 files changed, 17 insertions(+)
diff --git a/www/mod_auth_mellon/Makefile b/www/mod_auth_mellon/Makefile
index fa1df821885f..4df20ffa0317 100644
--- a/www/mod_auth_mellon/Makefile
+++ b/www/mod_auth_mellon/Makefile
@@ -1,5 +1,6 @@
PORTNAME= mod_auth_mellon
PORTVERSION= 0.18.0
+PORTREVISION= 1
CATEGORIES= www
PKGNAMEPREFIX= ${APACHE_PKGNAMEPREFIX}
DISTVERSIONPREFIX= v
diff --git a/www/mod_auth_mellon/files/patch-mellon__create__metadata.sh b/www/mod_auth_mellon/files/patch-mellon__create__metadata.sh
new file mode 100644
index 000000000000..795822006440
--- /dev/null
+++ b/www/mod_auth_mellon/files/patch-mellon__create__metadata.sh
@@ -0,0 +1,16 @@
+--- mellon_create_metadata.sh.orig 2022-11-02 11:48:53 UTC
++++ mellon_create_metadata.sh
+@@ -75,6 +75,13 @@ CERT="$(grep -v '^-----' "$OUTFILE.cert")"
+ cat >"$OUTFILE.xml" <<EOF
+ <EntityDescriptor entityID="$ENTITYID" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+ <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol" AuthnRequestsSigned="true">
++ <KeyDescriptor use="encryption">
++ <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
++ <ds:X509Data>
++ <ds:X509Certificate>$CERT</ds:X509Certificate>
++ </ds:X509Data>
++ </ds:KeyInfo>
++ </KeyDescriptor>
+ <KeyDescriptor use="signing">
+ <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+ <ds:X509Data>