(being respectful with occurences that might change the behaviour, i.e. default database prefixes)

Refactor SimpleSAML\Utils\Arrays::normalizeAttributesArray() to SimpleSAML\Utils\Attributes::normalizeAttributesArray().

No need to keep it around as deprecated, since it has only been in master, never in a released version, and has been added just a few months ago.

Move validateCA(), validateCABuiltIn() and validateCAExec() from SimpleSAML_Utilities to SimpleSAML_XML_Validator, where they are used. Remove validateCABuiltIn() and validateCAExec() from SimpleSAML_Utilities as they are no longer used. Eventually, all of this should disappear.

Deprecate SimpleSAML_Utilities::maskErrors() and SimpleSAML_Utilities::popErrorMask(). These two should be where they are used, in the OpenID modules.

Move SimpleSAML_Utilities::resolveCert() to SimpleSAML\Utils\Config::getCertPath() and deprecate the former.

Move SimpleSAML_Utilities::parseStateID() to SimpleSAML_Auth_State::parseStateID() and deprecate the former.

Deprecate SimpleSAML_Utilities::getDefaultEndpoint().

Move SimpleSAML_Utilities:: debugMessage() to SimpleSAML\Utils\HTTP::debugSAMLMessage() and deprecate the former.

Move SimpleSAML_Utilities:: checkCookie() to SimpleSAML\Utils\HTTP::checkSessionCookie() and deprecate the former.

SimpleSAML_Utilities::resolvePath was moved incorrectly to \SimpleSAML\Utils\HTTP instead of \SimpleSAML\Utils\System. Fix that.

Move SimpleSAML_Utilities:: redirectUntrustedURL() to SimpleSAML\Utils\HTTP:: redirectUntrustedURL() and deprecate the former.

Move SimpleSAML_Utilities:: checkURLAllowed() to SimpleSAML\Utils\HTTP:: checkURLAllowed() and deprecate the former.

Move SimpleSAML_Utilities:: redirectTrustedURL() to SimpleSAML\Utils\HTTP:: redirectTrustedURL() and deprecate the former.

Move SimpleSAML_Utilities:: setCookie() to SimpleSAML\Utils\HTTP:: setCookie() and deprecate the former.

Move the createPostRedirectLink(), postRedirect() and createHttpPostRedirectLink() methods in SimpleSAML_Utilities to \SimpleSAML\Utils\HTTP. The last one is made private, the others are renamed to submitPOSTData() and getPOSTRedirectURL(), respectively. Deprecate the three old ones.

Move SimpleSAML_Utilities::normalizeURL() to SimpleSAML\Utils\HTTP::normalizeURL() and deprecate the former.

Move SimpleSAML_Utilities::resolveURL() to SimpleSAML\Utils\HTTP::resolveURL() and deprecate the former.

Move SimpleSAML_Utilities::selfURLNoQuery() to SimpleSAML\Utils\HTTP::getSelfURLNoQuery() and deprecate the former.

Move SimpleSAML_Utilities::selfURL() to SimpleSAML\Utils\HTTP::getSelfURL() and deprecate the former.

Move SimpleSAML_Utilities::selfURLhost() to SimpleSAML\Utils\HTTP::getSelfURLHost() and deprecate the former.

Move SimpleSAML_Utilities::getFirstPathElement() to SimpleSAML\Utils\HTTP::getFirstPathElement() and deprecate the former.

Move SimpleSAML_Utilities::getSelfHostWithPath() to SimpleSAML\Utils\HTTP::getSelfHostWithPath() and deprecate the former.

Remove the private methods getServerHost(), getServerHTTPS() and getServerPort() from SimpleSAML_Utilities.

Move SimpleSAML_Utilities::getSelfHost() to SimpleSAML\Utils\HTTP::getSelfHost() and deprecate the former.