spring-ws
spring-ws copied to clipboard
spring-projects
Support WSS4J subject cert constraints
If no Subject DN Certificate Constraint has been configured for the case described here http://koenserneels.blogspot.com/2013/09/ws-security-using-binarysecuritytoken.html WSS4J emits the following warning:
WARN - org.apache.wss4j.common.crypto.CryptoBase - No Subject DN Certificate Constraints were defined. This could be a security issue
This PR is a work-in-progress for adding support for configuring Subject DN Certificate Constraint for WSS4J (SIG_SUBJECT_CERT_CONSTRAINTS ).
More info in JIRA-issue: https://jira.spring.io/browse/SWS-1058
@runeflobakk Please sign the Contributor License Agreement!
Click here to manually synchronize the status of this Pull Request.
See the FAQ for frequently asked questions.
Is it something I can do to enable some progress on this pull request? Thank you.
Not affiliated with Spring but it looks like you could add test cases. In particual there should be one test to verify that changes do not change defaults when option is not set by user, and then a test to verify behavior when set. FYI:ws-proxy is a real asset, thanks ! FYI: wss4j 2.4.0 adds MS compatability for IssuerSerial DN
