Uploaded image for project: 'Identity Provider'
  1. Identity Provider
  2. IDP-628

Add support for disabling trusted name checking in StaticPKIX- TrustEngine parsers

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Minor
    • Resolution: Completed
    • Affects Version/s: 3.0.0
    • Fix Version/s: 3.1.0
    • Component/s: Configuration
    • Labels:
      None

      Description

      Primary use case is when using the security:StaticPKIXX509Credential engine for TLS, e.g with a MetadataProvider. Allows disabling the name check in the trust engine and letting the TLS socket factory eval the hostname against the cert using standard mechanisms.

        Attachments

          Activity

            People

            Assignee:
            putmanb@shibboleth.net Brent Putman
            Reporter:
            putmanb@shibboleth.net Brent Putman
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: