Merge pull request #13 from codekitchen/original_version

properly declare ffi as a gem dependency
gem version bump
allow responses to process encrypted section separately from unencrypted part

SAML requests have an unencrypted and an encrypted part.
There is some info in the unencrypted part that can be used
to identify the correct settings for the SAML response.
(namely, the issuer) So this separates processing the
encrypted part from parsing out that needed information.
pull development deps from gemspec to gemfile

this allows ruby 1.8 and 1.9 to have the proper ruby-debug gem
specified.

also ignore the Gemfile.lock, since this is a gem.
add simple Rakefile for convenience
add simple mute feature to clean up test output
sign both query string and XML of log out requests

also specify Destination attribute, since OpenAM requires that be
present when it has log out request verification turned on
bump gem version to 0.1.20
publish pubkey for signing as well as encryption
get travis build up and running
Merge pull request #15 from phinze/sign_log_out_requests

Sign log out requests
attempt decryption with multiple private keys

this will help to support key rotation
bump version
Merge pull request #16 from phinze/multiple_keys

attempt decryption with multiple private keys
Fix LogOutRequest XML signatures

 - The XMLSecurity.sign method was outputting its result with pretty
   formatting turned on. This was messing with whitespace in the result
   rendering the included digest (and therefore signature) invalid
 - When sigining the XML, optionally add a URI to the Reference which
   points to the ID of the element being signed, and use this feature in
   when signing the LogOutRequest. Shibboleth will fail to validate
   unless this URI attribute is present and properly dereferences to the
   element being signed
 - Report the NameID format properly in the LogOutRequest; it was pinned
   as 'transient' before. This preventied Shibboleth from logging a
   user out when other NameID formats were used, causing it to respond
   with status:UnknownPrincipal
 - We now include the public certificate in the body of the
   LogOutRequest. While I have yet to find an IdP that requires it, it's
   definitely more convenient and often simplifies debugging
Merge branch 'fix_log_out_request_signatures' into original_version
bump version to 0.1.22
don't add newlines to the base64 encoded data
use https for bundler rubygems
bump version to 0.1.23