Skip to content

Wss4jSecurityInterceptor.verifyCertificateTrust should use Signature validator from WSSConfig [SWS-878] #953

Closed
@gregturn

Description

@gregturn

aslak os opened SWS-878 and commented

While working on a custom certificate trust system. I discovert that in order to supply a custom validator of trust i had to both set it in WSSConfig and override the verifyCertificateTrust method.
The reason is that the verifyCertificateTrust instansiate a Validator hardcoded by name useing its constructor.
I would assume and prefer that it used the configuration set in WSSConfig. How ever it could be that this is done intentionally.


Affects: 2.2.0.RELEASE

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions