[JIRA] Updated: (OSJ-10) Add support for configuring PKIX policy checking in the PKIX trust engine

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/OSJ-10?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor updated OSJ-10:
----------------------------

    Component/s: Security

> Add support for configuring PKIX policy checking in the PKIX trust engine
> -------------------------------------------------------------------------
>
>                 Key: OSJ-10
>                 URL: https://issues.shibboleth.net/jira/browse/OSJ-10
>             Project: OpenSAML - Java
>          Issue Type: New Feature
>          Components: Security
>            Reporter: Kaspar Brand
>            Assignee: Brent Putman
>            Priority: Minor
>             Fix For: 3.0.0
>
>
> To bring the IdP's PKIX trust engine configuration options on a par with those recently added for the SP in CPPXT-78, it would be nice to have support for PKIX policy checking in the IdP as well.
> I.e., besides the <TrustedName> child elements it should also be possible to configure <PolicyOID> elements, and the list of configurable PKIXValidationOptions should be extended to cover policyMappingInhibit and anyPolicyInhibit, too.
> Note that these features are already available/implemented in the CertPath API (see http://download.oracle.com/javase/6/docs/api/java/security/cert/PKIXParameters.html):
> - setInitialPolicies for providing the list of acceptable policy OIDs
> - setPolicyMappingInhibited for disallowing policy mapping
> - setAnyPolicyInhibited for disallowing the any policy OID
> (setExplicitPolicyRequired should be set to true as soon as at least one acceptable policy OID is provided).

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira