[java-metadata-aggregator] branch master updated (44cf794 -> 840bb2e)
Ian Young
ian at iay.org.uk
Thu Dec 10 12:32:43 EST 2015
This is an automated email from the git hooks/post-receive script.
iay pushed a change to branch master
in repository java-metadata-aggregator.
from 44cf794 Fix unchecked cast warnings in a test.
new 7ed7e24 MDA-153 add generic validator framework
new 002c3f5 MDA-154 add X.509 certificate validation framework
new 2988cb0 MDA-74 provide validator for RSA modulus smaller than N bits
new 84bceb1 MDA-155 provide validator for small or invalid RSA exponents
new 33287d6 MDA-69 provide validator to check embedded keys against known key lists
new 840bb2e MDA-154 add X.509 certificate validation framework
The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../metadata/dom/AbstractDOMValidationStage.java | 98 +
.../metadata/dom/ds/X509ValidationStage.java | 85 +
.../ds/XMLDSIGSupport.java} | 22 +-
.../metadata/{util => dom/ds}/package-info.java | 5 +-
.../metadata/validate/BaseValidator.java | 93 +
.../Stage.java => validate/Validator.java} | 39 +-
.../{dom/saml/mdrpi => validate}/package-info.java | 6 +-
.../x509/AbstractX509Validator.java} | 13 +-
.../validate/x509/X509RSAExponentValidator.java | 115 +
.../validate/x509/X509RSAKeyLengthValidator.java | 110 +
.../x509/X509RSAOpenSSLBlacklistValidator.java | 234 +
.../metadata/validate/x509}/package-info.java | 7 +-
.../metadata/validate/x509/compromised-1024.txt | 18 +
.../metadata/validate/x509/compromised-2048.txt | 15 +
.../metadata/validate/x509/debian-1024.txt | 294918 ++++++++++++++++++
.../metadata/validate/x509/debian-2048.txt | 294918 ++++++++++++++++++
.../metadata/validate/x509/debian-4096.txt | 294918 ++++++++++++++++++
.../metadata/validate/x509/debian-512.txt | 294918 ++++++++++++++++++
.../metadata/dom/ds/X509ValidationStageTest.java | 119 +
.../validate/x509/BaseX509ValidatorTest.java | 47 +
.../x509/X509RSAExponentValidatorTest.java | 65 +
.../x509/X509RSAKeyLengthValidatorTest.java | 48 +
.../x509/X509RSAOpenSSLBlacklistValidatorTest.java | 144 +
.../metadata/dom/ds/X509ValidationStage-in.xml | 151 +
.../validate/x509/X509RSAExponentValidator-3.pem | 21 +
.../validate/x509/X509RSAExponentValidator-35.pem | 27 +
.../x509/X509RSAExponentValidator-65537.pem | 22 +
.../x509/X509RSAKeyLengthValidator-1024.pem | 15 +
.../x509/X509RSAKeyLengthValidator-2048.pem | 21 +
.../x509/X509RSAOpenSSLBlacklistValidator-1024.pem | 30 +
.../x509/X509RSAOpenSSLBlacklistValidator-1024.txt | 28 +
.../x509/X509RSAOpenSSLBlacklistValidator-2048.pem | 37 +
.../x509/X509RSAOpenSSLBlacklistValidator-2048.txt | 29 +
.../X509RSAOpenSSLBlacklistValidator-issue9.txt | 30 +
.../x509/X509RSAOpenSSLBlacklistValidator-ok.pem | 21 +
35 files changed, 1181346 insertions(+), 41 deletions(-)
create mode 100644 aggregator-pipeline/src/main/java/net/shibboleth/metadata/dom/AbstractDOMValidationStage.java
create mode 100644 aggregator-pipeline/src/main/java/net/shibboleth/metadata/dom/ds/X509ValidationStage.java
copy aggregator-pipeline/src/main/java/net/shibboleth/metadata/{ItemMetadata.java => dom/ds/XMLDSIGSupport.java} (69%)
copy aggregator-pipeline/src/main/java/net/shibboleth/metadata/{util => dom/ds}/package-info.java (91%)
create mode 100644 aggregator-pipeline/src/main/java/net/shibboleth/metadata/validate/BaseValidator.java
copy aggregator-pipeline/src/main/java/net/shibboleth/metadata/{pipeline/Stage.java => validate/Validator.java} (51%)
copy aggregator-pipeline/src/main/java/net/shibboleth/metadata/{dom/saml/mdrpi => validate}/package-info.java (89%)
copy aggregator-pipeline/src/main/java/net/shibboleth/metadata/{dom/saml/mdattr/package-info.java => validate/x509/AbstractX509Validator.java} (68%)
create mode 100644 aggregator-pipeline/src/main/java/net/shibboleth/metadata/validate/x509/X509RSAExponentValidator.java
create mode 100644 aggregator-pipeline/src/main/java/net/shibboleth/metadata/validate/x509/X509RSAKeyLengthValidator.java
create mode 100644 aggregator-pipeline/src/main/java/net/shibboleth/metadata/validate/x509/X509RSAOpenSSLBlacklistValidator.java
copy {aggregator-cli/src/main/java/net/shibboleth/metadata/cli => aggregator-pipeline/src/main/java/net/shibboleth/metadata/validate/x509}/package-info.java (89%)
create mode 100644 aggregator-pipeline/src/main/resources/net/shibboleth/metadata/validate/x509/compromised-1024.txt
create mode 100644 aggregator-pipeline/src/main/resources/net/shibboleth/metadata/validate/x509/compromised-2048.txt
create mode 100644 aggregator-pipeline/src/main/resources/net/shibboleth/metadata/validate/x509/debian-1024.txt
create mode 100644 aggregator-pipeline/src/main/resources/net/shibboleth/metadata/validate/x509/debian-2048.txt
create mode 100644 aggregator-pipeline/src/main/resources/net/shibboleth/metadata/validate/x509/debian-4096.txt
create mode 100644 aggregator-pipeline/src/main/resources/net/shibboleth/metadata/validate/x509/debian-512.txt
create mode 100644 aggregator-pipeline/src/test/java/net/shibboleth/metadata/dom/ds/X509ValidationStageTest.java
create mode 100644 aggregator-pipeline/src/test/java/net/shibboleth/metadata/validate/x509/BaseX509ValidatorTest.java
create mode 100644 aggregator-pipeline/src/test/java/net/shibboleth/metadata/validate/x509/X509RSAExponentValidatorTest.java
create mode 100644 aggregator-pipeline/src/test/java/net/shibboleth/metadata/validate/x509/X509RSAKeyLengthValidatorTest.java
create mode 100644 aggregator-pipeline/src/test/java/net/shibboleth/metadata/validate/x509/X509RSAOpenSSLBlacklistValidatorTest.java
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/dom/ds/X509ValidationStage-in.xml
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAExponentValidator-3.pem
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAExponentValidator-35.pem
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAExponentValidator-65537.pem
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAKeyLengthValidator-1024.pem
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAKeyLengthValidator-2048.pem
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAOpenSSLBlacklistValidator-1024.pem
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAOpenSSLBlacklistValidator-1024.txt
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAOpenSSLBlacklistValidator-2048.pem
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAOpenSSLBlacklistValidator-2048.txt
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAOpenSSLBlacklistValidator-issue9.txt
create mode 100644 aggregator-pipeline/src/test/resources/net/shibboleth/metadata/validate/x509/X509RSAOpenSSLBlacklistValidator-ok.pem
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list