[JIRA] Created: (OSJ-10) Add support for configuring PKIX policy checking in the PKIX trust engine

[Kaspar Brand (JIRA)]

Add support for configuring PKIX policy checking in the PKIX trust engine
-------------------------------------------------------------------------

                 Key: OSJ-10
                 URL: https://issues.shibboleth.net/jira/browse/OSJ-10
             Project: OpenSAML - Java
          Issue Type: New Feature
            Reporter: Kaspar Brand
            Assignee: Brent Putman
            Priority: Minor


To bring the IdP's PKIX trust engine configuration options on a par with those recently added for the SP in CPPXT-78, it would be nice to have support for PKIX policy checking in the IdP as well.

I.e., besides the <TrustedName> child elements it should also be possible to configure <PolicyOID> elements, and the list of configurable PKIXValidationOptions should be extended to cover policyMappingInhibit and anyPolicyInhibit, too.

Note that these features are already available/implemented in the CertPath API (see http://download.oracle.com/javase/6/docs/api/java/security/cert/PKIXParameters.html):

- setInitialPolicies for providing the list of acceptable policy OIDs

- setPolicyMappingInhibited for disallowing policy mapping

- setAnyPolicyInhibited for disallowing the any policy OID

(setExplicitPolicyRequired should be set to true as soon as at least one acceptable policy OID is provided).

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira