#!/usr/bin/env python import argparse from saml2 import saml from saml2 import md from saml2 import xmldsig from saml2 import xmlenc from saml2.attribute_converter import ac_factory from saml2.httpbase import HTTPBase from saml2.extension import dri from saml2.extension import idpdisc from saml2.extension import mdattr from saml2.extension import mdrpi from saml2.extension import mdui from saml2.extension import shibmd from saml2.extension import ui from saml2.sigver import _get_xmlsec_cryptobackend from saml2.sigver import SecurityContext from saml2.mdstore import MetaDataFile from saml2.mdstore import MetaDataExtern __author__ = 'rolandh' """ A script that imports and verifies metadata. """ ONTS = { saml.NAMESPACE: saml, mdui.NAMESPACE: mdui, mdattr.NAMESPACE: mdattr, mdrpi.NAMESPACE: mdrpi, dri.NAMESPACE: dri, ui.NAMESPACE: ui, idpdisc.NAMESPACE: idpdisc, md.NAMESPACE: md, xmldsig.NAMESPACE: xmldsig, xmlenc.NAMESPACE: xmlenc, shibmd.NAMESPACE: shibmd } parser = argparse.ArgumentParser() parser.add_argument('-t', dest='type') parser.add_argument('-u', dest='url') parser.add_argument('-c', dest='cert') parser.add_argument('-a', dest='attrsmap') parser.add_argument('-o', dest='output') parser.add_argument('-x', dest='xmlsec') parser.add_argument('-i', dest='ignore_valid', action='store_true') parser.add_argument(dest="item") args = parser.parse_args() metad = None if args.ignore_valid: kwargs = {"check_validity": False} else: kwargs = {} if args.type == "local": if args.cert and args.xmlsec: crypto = _get_xmlsec_cryptobackend(args.xmlsec) sc = SecurityContext(crypto) metad = MetaDataFile(ONTS.values(), args.item, args.item, cert=args.cert, security=sc, **kwargs) else: metad = MetaDataFile(ONTS.values(), args.item, args.item, **kwargs) elif args.type == "external": ATTRCONV = ac_factory(args.attrsmap) httpc = HTTPBase() crypto = _get_xmlsec_cryptobackend(args.xmlsec) sc = SecurityContext(crypto) metad = MetaDataExtern(ONTS.values(), ATTRCONV, args.url, sc, cert=args.cert, http=httpc, **kwargs) if metad: try: metad.load() except: raise else: print("OK")