[java-idp-plugin-duo] branch main updated: Temporarily remove the enhanced socket factor for the Nimbus client

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-duo.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commit;h=317fb4fe0d1dbb57b21b3e09519317dbec791e3c

The following commit(s) were added to refs/heads/main by this push:
       new  317fb4f   Temporarily remove the enhanced socket factor for the Nimbus client
317fb4f is described below

commit 317fb4fe0d1dbb57b21b3e09519317dbec791e3c
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Tue Oct 6 17:29:23 2020 +0100

    Temporarily remove the enhanced socket factor for the Nimbus client
---
 .../net/shibboleth/idp/plugin/authn/duo/duo-client-factory-bean.xml     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/duo-client-factory-bean.xml b/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/duo-client-factory-bean.xml
index f9fef6c..da660fa 100644
--- a/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/duo-client-factory-bean.xml
+++ b/idp-duo-nimbus-client-impl/src/main/resources/net/shibboleth/idp/plugin/authn/duo/duo-client-factory-bean.xml
@@ -19,7 +19,7 @@
     
     <!-- Create a default HTTP Client using the global http settings overrides -->
     <bean id="shibboleth.authn.DuoOIDC.InternalHttpClient" class="net.shibboleth.idp.plugin.authn.duo.nimbus.DuoHttpClientFactoryBean" lazy-init="true"
-        p:tLSSocketFactory-ref="shibboleth.SecurityEnhancedTLSSocketFactory"
+        p:tLSSocketFactory="#{ %{idp.httpclient.useTrustEngineTLSSocketFactory:false} or %{idp.httpclient.useSecurityEnhancedTLSSocketFactory:false} ? @'shibboleth.SecurityEnhancedTLSSocketFactory' : null }"
         p:connectionDisregardTLSCertificate="%{idp.duo.oidc.connectionDisregardTLSCertificate:false}"
         p:connectionTimeout="%{idp.duo.oidc.connectionTimeout:%{idp.httpclient.connectionTimeout:PT1M}}"
         p:connectionRequestTimeout="%{idp.duo.oidc.connectionRequestTimeout:%{idp.httpclient.connectionRequestTimeout:PT1M}}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.