[java-identity-provider] branch master updated: OSJ-209: Support mandatory use of TrustEngine in SecurityEnhancedTLSSocketFactory

Brent Putman putmanb at georgetown.edu
Thu Jun 29 19:06:07 EDT 2017


This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=fc64201237a81c71580ce028fe79bad7e0aac969

The following commit(s) were added to refs/heads/master by this push:
       new  fc64201   OSJ-209: Support mandatory use of TrustEngine in SecurityEnhancedTLSSocketFactory
fc64201 is described below

commit fc64201237a81c71580ce028fe79bad7e0aac969
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Thu Jun 29 18:54:20 2017 -0400

    OSJ-209: Support mandatory use of TrustEngine in
    SecurityEnhancedTLSSocketFactory
    
    Add new HttpClient TLS socket factory bean for the
    client TLS-only case.
---
 idp-conf/src/main/resources/system/conf/global-system.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/idp-conf/src/main/resources/system/conf/global-system.xml b/idp-conf/src/main/resources/system/conf/global-system.xml
index 1e2bd1f..153794d 100644
--- a/idp-conf/src/main/resources/system/conf/global-system.xml
+++ b/idp-conf/src/main/resources/system/conf/global-system.xml
@@ -357,6 +357,11 @@
         class="org.opensaml.security.httpclient.impl.SecurityEnhancedHttpClientSupport"
         factory-method="buildTLSSocketFactoryWithClientTLS" />
     
+    <bean id="shibboleth.SecurityEnhancedTLSSocketFactoryWithClientTLSOnly"
+        lazy-init="true"
+        class="org.opensaml.security.httpclient.impl.SecurityEnhancedHttpClientSupport"
+        factory-method="buildTLSSocketFactoryWithClientTLSOnly" />
+        
     <bean id="shibboleth.StaticExplicitTrustEngine" abstract="true"
         class="net.shibboleth.idp.profile.spring.factory.StaticExplicitKeyFactoryBean" />
     

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list