Uploaded image for project: 'WSS4J'
  1. WSS4J
  2. WSS-489

Extend Crypto interface with verifyTrustDirect() method

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.0.0
    • None
    • None

    Description

      Normally validate() operation checks only validity period, trusted chain and CRLs of X509 certificate. Basically it is not necessary that certificate exists in the repository/keystore.
      However, in some cases it is required that certificate itself is "known" and located in trusted store or XKMS repository (direct trust).

      To cover this use case I would propose to extend Crypto interface with verifyTrustDirect() method that cover this functionality. CryptoBase will delegate this method to verifyTrust() by default.

      See https://issues.apache.org/jira/browse/CXF-5482 for details

      Attachments

        1. crypto-direct-trust.patch
          2 kB
          Andrei Shakirin

        Activity

          People

            coheigea Colm O hEigeartaigh
            ashakirin Andrei Shakirin
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: