edugain-discuss AT lists.geant.org

Subject: An open discussion list for topics related to the eduGAIN interfederation service.

List archive

[eduGAIN-discuss] eduGAIN validator

From: Maja Wolniewicz <mgw AT umk.pl>
To: edugain-assembly AT lists.geant.org, edugain-discuss AT lists.geant.org
Subject: [eduGAIN-discuss] eduGAIN validator
Date: Fri, 15 May 2026 11:31:48 +0200
Authentication-results: mail.geant.org; dkim=pass (2048-bit key; unprotected) header.d=umk.pl header.i= AT umk.pl header.a=rsa-sha256 header.s=default header.b=P4o4wjy5; dkim-atps=neutral
Dkim-filter: OpenDKIM Filter v2.11.0 smtp.umk.pl A6D39201D5

Hello,

I've just upgraded the eduGAIN validator on technical.edugain.org site.

The new version uses the Shibboleth MDA 1.0.0 and pyFF 2.1.5, it also includes a few fixes to better handle element values containing wrong "anyURI" value.

The new validator code relies on the newest python cryptography package which is more strict while parsing ASN1 values in a certificate and a wrong ASN1 value generates an exception.

For now in such a case the validator shows the warning for an affected entityId which says: "A certificate has a problem and can't be loaded and analysed."

There is now only one entityId in the eduGAIN feed which has such a problem (the federation in question has been notified).

The newest validator code will be also used in the aggregation process starting from Monday 18th.

Maja

eduGAIN OT

Attachment: smime.p7s
Description: S/MIME cryptographic signature

[eduGAIN-discuss] eduGAIN validator, Maja Wolniewicz, 05/15/2026
- Re: [eduGAIN-discuss] eduGAIN validator, Peter Brand, 15-May-2026