skip to navigation
skip to content

pyFF 0.9dev

Federation Feeder

Package Documentation

Latest Version: 0.9.4

python SAML metadata aggregator

This is a SAML metadata aggregator written in python. It is based on the model for metadata exchange by Ian Young:


  • Pluggable “piplines” for processing SAML metadata
  • Signature validation and creation
  • Support for using PKCS#11 tokens for signing
  • Certificate expiration checking and reporting
  • Fast parallell fetch of multiple streams


  • pyXMLSecurity
  • PyKCS11 (optional)



Release date: UNRELEASED


Release date: Tue Jul 10 15:48:07 CEST 2012

  • Schema validation
  • Refactor dynamic loading framework


Release date: Wed Jul 11 16:31:06 CEST 2012

Because of the way OpenSSL handles self-signed certificates the XML validation extracts the public key from the certificate and uses that instead of the X509 certificate to validate an XML signature. Right now this introduces a dependency on M2Crypto which will be removed in the fugure. Note that ubuntu/debian users should install python-m2crypto instead of installing M2Crypto (


Release date: Thu Aug 30 08:00:00 CEST 2012

  • XML signing and validation using pyXMLSecurity
  • Support for PKCS#11-based HSMs using pykcs11

We are now using a (limited) pure-python implmementation of xmlsec which makes it easier to sign using HSMs. The only mandatory non-python dependency now is lxml.


Release date: Fri Sep 7 10:13:33 CEST 2012

  • support breaking out of pipelines using exceptions
  • kill the pipeline if selects picks 0 elements
  • more debug logging
  • more robust handling of zero-length selectors
  • completely remove pyOpenSSL dependency
  • many bugfixes and cleanup


Release date: Fri Nov 30 09:37:59 CET 2012 * HTTP-based pyffd with MDX support * several bugfixes * indexing in MDRepository * completely rewritten URL fetcher with monitoring


Release date: UNRELEASED

File Type Py Version Uploaded on Size
pyFF-0.9dev.tar.gz (md5) Source 2012-11-30 209KB