[java-opensaml] 10/16: Make server TLS non-fatal by default.

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch master
in repository java-opensaml.

View the commit online:
http://git.shibboleth.net/view/?p=java-opensaml.git;a=commit;h=3b1eb9fb38ccc97b47a485428bcd7b463eeb4cd6

commit 3b1eb9fb38ccc97b47a485428bcd7b463eeb4cd6
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Thu Sep 20 17:05:47 2018 -0400

    Make server TLS non-fatal by default.
---
 .../opensaml/soap/client/http/AbstractPipelineHttpSOAPClient.java    | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/opensaml-soap-api/src/main/java/org/opensaml/soap/client/http/AbstractPipelineHttpSOAPClient.java b/opensaml-soap-api/src/main/java/org/opensaml/soap/client/http/AbstractPipelineHttpSOAPClient.java
index 38f3c9d..4c2afe1 100644
--- a/opensaml-soap-api/src/main/java/org/opensaml/soap/client/http/AbstractPipelineHttpSOAPClient.java
+++ b/opensaml-soap-api/src/main/java/org/opensaml/soap/client/http/AbstractPipelineHttpSOAPClient.java
@@ -19,6 +19,7 @@ package org.opensaml.soap.client.http;
 
 import static org.opensaml.security.httpclient.HttpClientSecurityConstants.CONTEXT_KEY_CRITERIA_SET;
 import static org.opensaml.security.httpclient.HttpClientSecurityConstants.CONTEXT_KEY_TRUST_ENGINE;
+import static org.opensaml.security.httpclient.HttpClientSecurityConstants.CONTEXT_KEY_SERVER_TLS_FAILURE_IS_FATAL;
 
 import java.io.IOException;
 
@@ -357,6 +358,10 @@ public abstract class AbstractPipelineHttpSOAPClient<OutboundMessageType, Inboun
                 clientContext.setAttribute(CONTEXT_KEY_CRITERIA_SET, 
                         buildTLSCriteriaSet(request, operationContext));
             }
+            if (clientContext.getAttribute(CONTEXT_KEY_TRUST_ENGINE) != null
+                    && clientContext.getAttribute(CONTEXT_KEY_SERVER_TLS_FAILURE_IS_FATAL) == null) {
+                clientContext.setAttribute(CONTEXT_KEY_SERVER_TLS_FAILURE_IS_FATAL, Boolean.FALSE);
+            }
         }
         
         HttpClientSecuritySupport.addDefaultTLSTrustEngineCriteria(clientContext, request);

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.