Reimplement \SimpleSAML\Utils\Crypto::aesDecrypt() and \SimpleSAML\Utils\Crypto::aesEncrypt() to use openssl instead of mcrypt. This removes the direct dependency on mcrypt and closes #228.

Update config.php

Fix typo (reccomended -> recommended)

$t - not grep-safe, used in 3rd party libs for other things
$template - only used for templates last I checked

Harbinger of things to come...

Move the aes[En|De]crypt() functionality in \SimpleSAML\Utils\Crypto to internal methods where the secret is passed as a parameter. Then we don't need a working configuration to test the functionality.

This reverts commit aec9571d.

Use $metadata array for example IDP and SP metadata

As per https://groups.google.com/forum/#!topic/simplesamlphp/nFXerlX839E

The text was copied from https://code.google.com/p/simplesamlphp/wiki/LostState, corrected some language and added a piece on http/https stemming from the comments on that page.

Fixes #214

Corrected logic in checkSessionCookie

Raise InvalidArgumentException if $retryURL is not a string AND is not null

Support file uploads in metadata converter.

Set PHP session cookie configuation to be true by default.

Remove override.host config variable.

# By Brook Schofield
# Via Brook Schofield (1) and Jaime Pérez Crespo (1)
* 'master' of github.com:simplesamlphp/simplesamlphp:
  Improve the local generation of metadata for attributes.required

Fix the phpdoc for SimpleSAML\Utils\Random::generateID() and add a constant with the length of generated IDs.

This option made it possible to override the configuration per host, but it has never been documented, and it can be replaced with simple PHP code in the configuration.

Closes #2

It's obviously more secure and therefore better as a default.

Improve the local generation of metadata to support registrationAutho…

Closes #17

A-Select: always add uid+organization to attributes

Useful in the leadup to entity category support to publish
registrationAuthority (which might be overridden by a federation) and
attributes.required.

Use robrichards/xmlseclibs instead simplesamlphp/xmlseclibs

Implies update simplesamlphp/saml2 because share the same dependency

extend authX509 module with authentication processing filter for generating certificate expiry warnings

uid and organization attributes are not always in `$creds['attributes']`, so we add an option for that.

It has been marked deprecated and generates warnings since 2013.
The functionality is easily replaced by using the smartattributes module.