InCommon Metadata Diff List

[InCommon Operations <>]

The following diff compares the current production metadata with the
previously issued version of the production metadata.  It is also at
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1631213460-validUntil.2021-09-23T18.41.24Z.diff

diff --git a/InCommon-metadata.xml b/InCommon-metadata.xml
index 42380ee..f3ae008 100644
--- a/InCommon-metadata.xml
+++ b/InCommon-metadata.xml
@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210908T184115" 
Name="urn:mace:incommon" validUntil="2021-09-22T18:41:15Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210908T184115"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>NOQwUkrU9gxCCZFPYA8/cg9kaUULDEDkGi9OFfwL92I=</DigestValue></Reference></SignedInfo><SignatureValue>arfNyPE6JMEJX1v7AolckiHOnV24x/lJGaBbiifeyjSz2z1SfM6vqO2DMBX6pqgSi2WgneamQ4y7
-MhJ4amJdhmq8j9j5xuBn7muLaxpQ525Dyw4BMwm20UjsdbSkT0Xpqrnl0ZjvkzriJC7il7uh18Cg
-91Jvnselw+k/GvNX+DDKaaOAxOcaJjf+c+dy1TPyvkdW/ixLfO9HUuKBH/uytjbwMf5savUesJ64
-GAdANSpvYLV4w252wu7Z9t2OWv1V8DuaM/O4IDL/X/2Tqi04/W2+xOxs7dVa4x1JEkhzheFqjlIN
-zWg8x/69XjhajQJCe2Y2IqKAINWwkYnqQ1ga9Q==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
+<?xml version="1.0" encoding="UTF-8"?><EntitiesDescriptor 
xmlns="urn:oasis:names:tc:SAML:2.0:metadata" 
xmlns:alg="urn:oasis:names:tc:SAML:metadata:algsupport" 
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"; 
xmlns:icmd="http://id.incommon.org/metadata"; 
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol" 
xmlns:init="urn:oasis:names:tc:SAML:profiles:SSO:request-init" 
xmlns:mdattr="urn:oasis:names:tc:SAML:metadata:attribute" 
xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" 
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui" 
xmlns:remd="http://refeds.org/metadata"; 
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" 
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" 
xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"; 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; ID="INC20210909T184124" 
Name="urn:mace:incommon" validUntil="2021-09-23T18:41:24Z"><Signature 
xmlns="http://www.w3.org/2000/09/xmldsig#";><SignedInfo><CanonicalizationMethod
 Algorithm="http://www.w3.org/2001/10/
 xml-exc-c14n#"/><SignatureMethod 
Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><Reference 
URI="#INC20210909T184124"><Transforms><Transform 
Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform 
Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><DigestMethod
 
Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><DigestValue>toUzsX4czWw3qs/dRzucK6RU7m7g/jwbujJlMvSfuDk=</DigestValue></Reference></SignedInfo><SignatureValue>Y9DB7pI98M+zqHi2v86UcNHhKTOYIBAAZeSqH+jrDRMajx22vETF82eVwxwaJz4RQ9gvOSrC5/ca
+tMI21JsUw7LMEj1Yj/LQURdA6i4K1Hs9KgTQe+i7Ojii23ruiKOk/lQL2UzWWKuJZQ1MIqOvmwnI
+ElNsY6+a0SpRSRYa5MpuXmApSLqufcqAPCFIldOtew2EK/ABs++KI3AY0cmtIINlRmZFoAsdLMp7
+LWGUrV231IpQeIsezWloG2b1MJIMiJqykGhEAb9AC5x8L9gHs9WoHFTatvCF7uPermxaBZvz3h8F
+Isg/i56n/l5pnnsMLucPsPrJzLfU25Fn4CDRuA==</SignatureValue><KeyInfo><X509Data><X509Certificate>MIIDgTCCAmmgAwIBAgIJAJRJzvdpkmNaMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMRUw
 EwYDVQQKDAxJbkNvbW1vbiBMTEMxMTAvBgNVBAMMKEluQ29tbW9uIEZlZGVyYXRpb24gTWV0YWRh
 dGEgU2lnbmluZyBLZXkwHhcNMTMxMjE2MTkzNDU1WhcNMzcxMjE4MTkzNDU1WjBXMQswCQYDVQQG
 EwJVUzEVMBMGA1UECgwMSW5Db21tb24gTExDMTEwLwYDVQQDDChJbkNvbW1vbiBGZWRlcmF0aW9u
@@ -19,7 +19,7 @@ 
qEbjhBFh/utXaeyeSOtaX65GwD5svDHnJBclAGkzeRIXqxmYG+I2zMm/JYGzEnbwToyC7yF6Q8cQ
 xOr37hEpqz+WN/x3qM2qyBLECQFjmlJrvRLkSL15PCZiu+xFNFd/zx6btDun5DBlfDS9DG+SHCNH
 
6Nq+NfP+ZQ8CGzP/3TaZPzMlKPDCjp0XOQfyQqFIXdwjPFTWjEusDBlm4qJAlQ==</X509Certificate></X509Data></KeyInfo></Signature>
 <Extensions>
-  <mdrpi:PublicationInfo creationInstant="2021-09-08T18:41:15Z" 
publisher="https://incommon.org"/>
+  <mdrpi:PublicationInfo creationInstant="2021-09-09T18:41:24Z" 
publisher="https://incommon.org"/>
 </Extensions>
 <EntityDescriptor entityID="https://issues.shibboleth.net/shibboleth";>
   <Extensions>
@@ -1075,71 +1075,73 @@ O8tLIQ==
         <mdui:Logo height="100" width="383" 
xml:lang="en">https://shibidp.cit.cornell.edu/cornell-logo.png</mdui:Logo>
       </mdui:UIInfo>
     </Extensions>
-    <KeyDescriptor use="signing">
+    <KeyDescriptor use="encryption">
       <ds:KeyInfo>
         <ds:X509Data>
-          <!-- Serial No. 15447110270650061652, expires on Fri Jun 27 
13:32:37 2031 GMT -->
-          <ds:X509Certificate>
-MIIESDCCArCgAwIBAgIJANZfKPLoYpNUMA0GCSqGSIb3DQEBCwUAMCYxJDAiBgNV
-BAMTG2N1LWF6LXVjd2ViMS5zcnZyLm1lZGlhMy51czAeFw0yMTA2MjkxMzMyMzda
-Fw0zMTA2MjcxMzMyMzdaMCYxJDAiBgNVBAMTG2N1LWF6LXVjd2ViMS5zcnZyLm1l
-ZGlhMy51czCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAOFtGboK645V
-XTfAjZo65LwaWgjfs4471E/2Q9IheEv30s3B9agb4p1m16So15oc3oxJVewqDPwi
-nFRlUI5cCtyfyTwr4ZKXTfu4xy3g1GyKBSQkL7Zufk1wO1diAin3p+WtKN22fr/7
-JWu6LquFBa80VGE73dhqcXfvCsQTiGOQd7oyVt6Z7gU9fI2wijc8IbbWFx/3rRJT
-x2XDNjVWIUikuo1WQrufTxcNdueShMzA0Dc4FaMQcuXw57MZSLqAFqEoPJzxXGNc
-IpdE9R9biyUn0He7WooDVq+Tpti6x+29UkLti/qOf/GI8+/9ZY2nUTVuZxioQ6UN
-6gflkhbv6I7rlAf20ZPr4HdyoDyNVgEaNCGZn9WX1T/wZ646SAHnJttfYH9bkNbK
-5Jtnuubnx7VPSexfNIHih354eF8WJMvkOKhHKl/saNG+Ttshd3p8JP+Xi9A6BIst
-DxKXO0VNDLMnLKAf9C8/uR4ziaRNR22oOq2QNInYNCzcv1MyEGnHpwIDAQABo3kw
-dzBWBgNVHREETzBNghtjdS1hei11Y3dlYjEuc3J2ci5tZWRpYTMudXOGLmh0dHBz
-Oi8vY3UtYXotdWN3ZWIxLnNydnIubWVkaWEzLnVzL3NoaWJib2xldGgwHQYDVR0O
-BBYEFM4To+p89FQ4MJJTSntrmtpfFV+xMA0GCSqGSIb3DQEBCwUAA4IBgQBAseBM
-53KFaXZEeRq3x72Phh8q1S8Vdt0cf4UOyo0EKwgekwmvfOevOLdYyPPBul66sGrP
-4WDQnCk/xn2davaqL8grNt7ChzDUllu4FWQv6oLSZaYtNexQ740iJXwrO0Wc208h
-uYJpxC92gO4i5Ziw58lgGPTrquSbPVoN23IX2LzByG2iH8NNfcY3cnW5rPd0CGdF
-mGSwpEHA9qo4DBcWU2ItE7U+VShYCGKBJDcOpJs8zUjDhG8JZsA7CsaDfxUAkLkM
-uha+hVOAO1ON8OmUda1b5ksD3UwFlLekMSLH0Oq5H+wqk+zIet4ZgWfiw6qTLyVB
-QHUFHgluQo7vteu/i89EuYJhJrkFDpK2BDXJZEsRtoawv7KO3+j7BK6Ptnizuy6d
-ZRhE8OB8wLuK+mHzdFpVQmqEyhYW1dbyxGQ3VQJDw3CjcXNrLuC2wPXt25cY3mBZ
-fSceYqqNXfG6c9r7DRykOmo+SNzraMO42R143oGZ6QlRpr6W/ZQF/9xHJJE=
+          <!-- Serial No. 17546010789971769525, expires on Fri Sep  5 
18:53:59 2031 GMT -->
+          <ds:X509Certificate>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           </ds:X509Certificate>
         </ds:X509Data>
       </ds:KeyInfo>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
+      <EncryptionMethod 
Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
     </KeyDescriptor>
-    <KeyDescriptor use="encryption">
+    <KeyDescriptor use="signing">
       <ds:KeyInfo>
         <ds:X509Data>
-          <!-- Serial No. 16330949305982640065, expires on Fri Jun 27 
13:32:36 2031 GMT -->
-          <ds:X509Certificate>
-MIIESDCCArCgAwIBAgIJAOKjL95kAd/BMA0GCSqGSIb3DQEBCwUAMCYxJDAiBgNV
-BAMTG2N1LWF6LXVjd2ViMS5zcnZyLm1lZGlhMy51czAeFw0yMTA2MjkxMzMyMzZa
.
.
.
The complete diff is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/prod-prod-1631213460-validUntil.2021-09-23T18.41.24Z.diff

An archive of this and past prod-prod diffs is available here:
https://wayf.incommonfederation.org/metadata-diff/prod-prod/?C=M;O=D

This is a one-way, notification only email list. If you have questions,
please email . You can also discuss related issues
with the community on .

- InCommon Federation Operations