[java-identity-provider] 01/06: IDP-1423 Remove deprecated attribute disregardSslCertificate
Rod Widdowson
rdw at steadingsoftware.com
Sun Mar 3 09:59:34 EST 2019
This is an automated email from the git hooks/post-receive script.
rdw pushed a commit to branch master
in repository java-identity-provider.
View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=68fe78cf6f5ef924436d71a201a8f1d85f688260
commit 68fe78cf6f5ef924436d71a201a8f1d85f688260
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Fri Mar 1 16:29:11 2019 +0000
IDP-1423 Remove deprecated attribute disregardSslCertificate
https://issues.shibboleth.net/jira/browse/IDP-1423
---
.../impl/AbstractDynamicHTTPMetadataProviderParser.java | 3 +--
.../metadata/impl/HTTPMetadataProviderParser.java | 3 +--
.../metadata/impl/HTTPMetadataProvidersParserSupport.java | 5 -----
idp-schema/src/main/resources/schema/shibboleth-metadata.xsd | 12 +-----------
4 files changed, 3 insertions(+), 20 deletions(-)
diff --git a/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/AbstractDynamicHTTPMetadataProviderParser.java b/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/AbstractDynamicHTTPMetadataProviderParser.java
index c6854b5..350e823 100644
--- a/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/AbstractDynamicHTTPMetadataProviderParser.java
+++ b/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/AbstractDynamicHTTPMetadataProviderParser.java
@@ -90,13 +90,12 @@ public abstract class AbstractDynamicHTTPMetadataProviderParser extends Abstract
|| element.hasAttributeNS(null, "socketTimeout")
|| element.hasAttributeNS(null, "maxConnectionsTotal")
|| element.hasAttributeNS(null, "maxConnectionsPerRoute")
- || element.hasAttributeNS(null, "disregardSslCertificate")
|| element.hasAttributeNS(null, "disregardTLSCertificate")
|| element.hasAttributeNS(null, "proxyHost") || element.hasAttributeNS(null, "proxyPort")
|| element.hasAttributeNS(null, "proxyUser") || element.hasAttributeNS(null, "proxyPassword")) {
log.warn("httpClientRef overrides settings for requestTimeout, connectionTimeout, "
+ "connectionRequestTimeout, socketTimeout, maxConnectionsTotal, maxConnectionsPerRoute, "
- + "disregardSslCertificate, disregardTLSCertificate, proxyHost, proxyPort, "
+ + "disregardTLSCertificate, proxyHost, proxyPort, "
+ "proxyUser and proxyPassword");
}
} else {
diff --git a/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/HTTPMetadataProviderParser.java b/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/HTTPMetadataProviderParser.java
index c93d974..424b962 100644
--- a/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/HTTPMetadataProviderParser.java
+++ b/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/HTTPMetadataProviderParser.java
@@ -90,12 +90,11 @@ public abstract class HTTPMetadataProviderParser extends AbstractReloadingMetada
|| element.hasAttributeNS(null, "connectionTimeout")
|| element.hasAttributeNS(null, "connectionRequestTimeout")
|| element.hasAttributeNS(null, "socketTimeout")
- || element.hasAttributeNS(null, "disregardSslCertificate")
|| element.hasAttributeNS(null, "disregardTLSCertificate")
|| element.hasAttributeNS(null, "proxyHost") || element.hasAttributeNS(null, "proxyPort")
|| element.hasAttributeNS(null, "proxyUser") || element.hasAttributeNS(null, "proxyPassword")) {
log.warn("httpClientRef overrides settings for requestTimeout, connectionTimeout, "
- + "connectionRequestTimeout, socketTimeout, disregardSslCertificate, disregardTLSCertificate, "
+ + "connectionRequestTimeout, socketTimeout, disregardTLSCertificate, "
+ " proxyHost, proxyPort, proxyUser and proxyPassword");
}
} else {
diff --git a/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/HTTPMetadataProvidersParserSupport.java b/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/HTTPMetadataProvidersParserSupport.java
index 488afa4..ae46971 100644
--- a/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/HTTPMetadataProvidersParserSupport.java
+++ b/idp-profile-spring/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/impl/HTTPMetadataProvidersParserSupport.java
@@ -94,11 +94,6 @@ public final class HTTPMetadataProvidersParserSupport {
if (element.hasAttributeNS(null, "disregardTLSCertificate")) {
tlsSocketFactoryBuilder.addPropertyValue("connectionDisregardTLSCertificate",
StringSupport.trimOrNull(element.getAttributeNS(null, "disregardTLSCertificate")));
- } else if (element.hasAttributeNS(null, "disregardSslCertificate")) {
- DeprecationSupport.warn(ObjectType.ATTRIBUTE, "disregardSslCertificate",
- parserContext.getReaderContext().getResource().getDescription(), "disregardTLSCertificate");
- tlsSocketFactoryBuilder.addPropertyValue("connectionDisregardTLSCertificate",
- StringSupport.trimOrNull(element.getAttributeNS(null, "disregardSslCertificate")));
}
if (httpClientSecurityParametersRef != null) {
diff --git a/idp-schema/src/main/resources/schema/shibboleth-metadata.xsd b/idp-schema/src/main/resources/schema/shibboleth-metadata.xsd
index 5a07dcb..88c1cd0 100644
--- a/idp-schema/src/main/resources/schema/shibboleth-metadata.xsd
+++ b/idp-schema/src/main/resources/schema/shibboleth-metadata.xsd
@@ -167,11 +167,6 @@
<documentation>The URL from which to retrieve the metadata.</documentation>
</annotation>
</attribute>
- <attribute name="disregardSslCertificate" type="string">
- <annotation>
- <documentation>This is deprecated, use disregardTLSCertificate instead.</documentation>
- </annotation>
- </attribute>
<attribute name="disregardTLSCertificate" type="string">
<annotation>
<documentation>Server certificate will be ignored when using an HTTPS source.</documentation>
@@ -491,7 +486,7 @@
org.apache.http.client.HttpClient object.
This attribute conflicts with and overrides the other HttpClient-related properties:
- disregardSslCertificate, disregardTLSCertificate, requestTimeout, proxyHost, proxyPort, proxyUser, proxyPassword.
+ disregardTLSCertificate, requestTimeout, proxyHost, proxyPort, proxyUser, proxyPassword.
</documentation>
</annotation>
</attribute>
@@ -511,11 +506,6 @@
</documentation>
</annotation>
</attribute>
- <attribute name="disregardSslCertificate" type="string">
- <annotation>
- <documentation>This is deprecated, use disregardTLSCertificate instead.</documentation>
- </annotation>
- </attribute>
<attribute name="disregardTLSCertificate" type="string">
<annotation>
<documentation>Server certificate will be ignored when using an HTTPS source.</documentation>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list