saml/logout: Support encrypted NameID.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2503 44740490-163a-0410-bde0-09ae8108e29a

modules/saml/www/sp/saml2-logout.php

@@ -57,6 +57,15 @@ if ($message instanceof SAML2_LogoutResponse) {
 	SimpleSAML_Logger::debug('module/saml2/sp/logout: Request from ' . $idpEntityId);
 	SimpleSAML_Logger::stats('saml20-idp-SLO idpinit ' . $spEntityId . ' ' . $idpEntityId);
 
+	if ($message->isNameIdEncrypted()) {
+		try {
+			$key = self::getDecryptionKey($idpMetadata, $spMetadata);
+		} catch (Exception $e) {
+			throw new SimpleSAML_Error_Exception('Error decrypting NameID: ' . $e->getMessage());
+		}
+		$message->decryptNameId($key);
+	}
+
 	$nameId = $message->getNameId();
 	$sessionIndexes = $message->getSessionIndexes();