/[Apache-SVN]
ViewVC logotype

Revision 1805066


Jump to revision: Previous Next
Author: coheigea
Date: Tue Aug 15 11:02:49 2017 UTC (6 years, 7 months ago)
Changed paths: 9
Log Message:
WSS-611 Fixes logic for extracting NameConstraint information from a cert. This closes #6.

Adds a new property so users can affirm that their cert provider can handle TrustAnchors with NameConstraints added and updates the Merlin and MerlinAKI crypto implementations to respect that and either add the NameConstraints or set them to null.

Includes changes made for WSS-612 (available in a separate commit) to fix the CertificateStore's handling of certificate chains.

Signed-off-by: Colm O hEigeartaigh <coheigea@apache.org>

Changed paths

Path Details
Directorywebservices/wss4j/trunk/ws-security-common/src/main/java/org/apache/wss4j/common/crypto/CryptoBase.java modified , text changed
Directorywebservices/wss4j/trunk/ws-security-common/src/main/java/org/apache/wss4j/common/crypto/Merlin.java modified , text changed
Directorywebservices/wss4j/trunk/ws-security-common/src/main/java/org/apache/wss4j/common/crypto/MerlinAKI.java modified , text changed
Directorywebservices/wss4j/trunk/ws-security-common/src/test/java/org/apache/wss4j/common/crypto/NameConstraintsTest.java added
Directorywebservices/wss4j/trunk/ws-security-common/src/test/resources/keys/nameconstraints/ added
Directorywebservices/wss4j/trunk/ws-security-common/src/test/resources/keys/nameconstraints/intermediate_signed.p12 added
Directorywebservices/wss4j/trunk/ws-security-common/src/test/resources/keys/nameconstraints/nameconstraints.jks added
Directorywebservices/wss4j/trunk/ws-security-common/src/test/resources/keys/nameconstraints/root_signed.p12 added
Directorywebservices/wss4j/trunk/ws-security-common/src/test/resources/keys/nameconstraints/self_signed.p12 added

infrastructure at apache.org
ViewVC Help
Powered by ViewVC 1.1.26