getMetadata20* functions do not return certData but a keys array

thijskh · thijskh · commit ffc6d238034a · 2023-02-26T15:36:10.000Z
diff --git a/src/SimpleSAML/Metadata/SAMLParser.php b/src/SimpleSAML/Metadata/SAMLParser.php
@@ -530,7 +530,7 @@ private function addExtensions(array &$metadata, array $roleDescriptor): void
      *   the browser-post binding.
      * - 'SingleLogoutService': String with the URL where we should send logout requests/responses.
      * - 'NameIDFormat': The name ID format this SP expects. This may be unset.
-     * - 'certData': X509Certificate for entity (if present).
+     * - 'keys': X509Certificate(s) for entity (if present).
      *
      * Metadata must be loaded with one of the parse functions before this function can be called.
      *
@@ -632,7 +632,7 @@ public function getMetadata20SP(): ?array
      * - 'SingleLogoutServiceResponse': String where we should send logout responses (if this is different from
      *   the 'SingleLogoutService' endpoint.
      * - 'NameIDFormats': The name ID formats this IdP supports.
-     * - 'certData': X509Certificate for entity (if present).
+     * - 'keys': X509Certificate(s) for entity (if present).
      *
      * Metadata must be loaded with one of the parse functions before this function can be called.
      *

Original file line number	Diff line number	Diff line change
`@@ -530,7 +530,7 @@ private function addExtensions(array &$metadata, array $roleDescriptor): void`
`530`	`530`	`* the browser-post binding.`
`531`	`531`	`* - 'SingleLogoutService': String with the URL where we should send logout requests/responses.`
`532`	`532`	`* - 'NameIDFormat': The name ID format this SP expects. This may be unset.`
`533`		`- * - 'certData': X509Certificate for entity (if present).`
	`533`	`+ * - 'keys': X509Certificate(s) for entity (if present).`
`534`	`534`	`*`
`535`	`535`	`* Metadata must be loaded with one of the parse functions before this function can be called.`
`536`	`536`	`*`
`@@ -632,7 +632,7 @@ public function getMetadata20SP(): ?array`
`632`	`632`	`* - 'SingleLogoutServiceResponse': String where we should send logout responses (if this is different from`
`633`	`633`	`* the 'SingleLogoutService' endpoint.`
`634`	`634`	`* - 'NameIDFormats': The name ID formats this IdP supports.`
`635`		`- * - 'certData': X509Certificate for entity (if present).`
	`635`	`+ * - 'keys': X509Certificate(s) for entity (if present).`
`636`	`636`	`*`
`637`	`637`	`* Metadata must be loaded with one of the parse functions before this function can be called.`
`638`	`638`	`*`