[JIRA] Commented: (CPPXT-70) Improve remote CRL access and caching support

[Scott Cantor (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/CPPXT-70?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13513#comment-13513 ] 

Scott Cantor commented on CPPXT-70:
-----------------------------------

Looking deeper, moving the PKIX validation itself behind a new API should decouple the "hard but defined" bits from the name-checking logic, which is simple to do, but hard to really follow or get right since it's all made up.

> Improve remote CRL access and caching support
> ---------------------------------------------
>
>                 Key: CPPXT-70
>                 URL: https://issues.shibboleth.net/jira/browse/CPPXT-70
>             Project: XMLTooling - C++
>          Issue Type: Improvement
>          Components: Security
>    Affects Versions: 1.4
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 1.5
>
>
> The initial CRLDP implementation uses some workarounds to avoid changing the trust engine class signature. The workarounds should be removed to avoid filesystem hackery or global locking, and move the caching metadata into memory. Hardcoded settings should also be moved to runtime options.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira