[java-idp-plugin-webauthn] branch main updated: Remove default CRL lists

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=902e2903b6f45eda4d4368a73f9a6eebe3e7735f

The following commit(s) were added to refs/heads/main by this push:
     new 902e290  Remove default CRL lists
902e290 is described below

commit 902e2903b6f45eda4d4368a73f9a6eebe3e7735f
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Thu Apr 18 17:07:09 2024 +0100

    Remove default CRL lists
    
     - Even though these were just for testing, adding to the jar was a dumb
    idea because, of course, they expire.
---
 .../plugin/authn/webauthn/conf/authn/webauthn.properties |   4 ++--
 .../plugin/authn/webauthn/crls/gsextendvalsha2g3r3.crl   | Bin 8026 -> 0 bytes
 .../idp/plugin/authn/webauthn/crls/root-r3.crl           | Bin 2157 -> 0 bytes
 3 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index 896ff94..923c694 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -45,8 +45,8 @@ idp.authn.webauthn.supportedPrincipals = \
 #idp.authn.webauthn.metadata.enabled = false
 #idp.authn.webauthn.metadata.trustRootFile =
 #idp.authn.webauthn.metadata.expectedLegalHeaders = Retrieval and use of this BLOB indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/
-# Downloaded CRLs to check metadata signature revocation status. The example set of CRLs given provide no function other than to pass the revocation checks, define your own in production
-idp.authn.webauthn.metadata.crls = classpath:/net/shibboleth/idp/plugin/authn/webauthn/crls/gsextendvalsha2g3r3.crl, classpath:/net/shibboleth/idp/plugin/authn/webauthn/crls/root-r3.crl
+# Downloaded CRLs to check metadata signature revocation status.
+#idp.authn.webauthn.metadata.crls = file://
 
 
 ## If you want to download the metadata from a URL when the IdP starts, you must specify a cache file (.bin) and the URL to fetch the metadata
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/crls/gsextendvalsha2g3r3.crl b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/crls/gsextendvalsha2g3r3.crl
deleted file mode 100644
index d2e3992..0000000
Binary files a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/crls/gsextendvalsha2g3r3.crl and /dev/null differ
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/crls/root-r3.crl b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/crls/root-r3.crl
deleted file mode 100644
index ef7074b..0000000
Binary files a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/crls/root-r3.crl and /dev/null differ

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.