[java-shib-common COMMIT] /branches/REL_1/src/main/java/edu/internet2/middleware/shibboleth/common/config/metadata/HT...

[noreply at shibboleth.net]

Author: putmanb
Date: Wed Mar 13 19:13:44 2013
New Revision: 1062

URL: http://svn.shibboleth.net/view/java-shib-common?rev=1062&view=rev
Log:
JOST-186: HTTPS scheme in FileBackedHTTPMetadataProvider does not perform hostname verification 

Modified:
    branches/REL_1/src/main/java/edu/internet2/middleware/shibboleth/common/config/metadata/HTTPMetadataProviderBeanDefinitionParser.java

Modified: branches/REL_1/src/main/java/edu/internet2/middleware/shibboleth/common/config/metadata/HTTPMetadataProviderBeanDefinitionParser.java
URL: http://svn.shibboleth.net/view/java-shib-common/branches/REL_1/src/main/java/edu/internet2/middleware/shibboleth/common/config/metadata/HTTPMetadataProviderBeanDefinitionParser.java?rev=1062&r1=1061&r2=1062&view=diff
==============================================================================
--- branches/REL_1/src/main/java/edu/internet2/middleware/shibboleth/common/config/metadata/HTTPMetadataProviderBeanDefinitionParser.java (original)
+++ branches/REL_1/src/main/java/edu/internet2/middleware/shibboleth/common/config/metadata/HTTPMetadataProviderBeanDefinitionParser.java Wed Mar 13 19:13:44 2013
@@ -111,6 +111,9 @@
                     disregardSslCertificate);
             if (disregardSslCertificate) {
                 builder.setHttpsProtocolSocketFactory(new TLSProtocolSocketFactory(null, buildNoTrustTrustManager()));
+            } else {
+                builder.setHttpsProtocolSocketFactory(new TLSProtocolSocketFactory(null, null, 
+                        org.apache.commons.ssl.HostnameVerifier.STRICT));
             }
         }