[java-plugin-shibd-saml] branch main updated: Switch default trust engines to bypass PKIX.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd-saml.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-saml/commit/17298d2a8a563c9bf9cce9f62233ab77a688da26

The following commit(s) were added to refs/heads/main by this push:
     new 17298d2  Switch default trust engines to bypass PKIX.
17298d2 is described below

commit 17298d2a8a563c9bf9cce9f62233ab77a688da26
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Mar 26 15:43:49 2026 -0400

    Switch default trust engines to bypass PKIX.
---
 .../META-INF/net/shibboleth/sp/service/agent/postconfig.xml         | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
index d1427f8..a090e9c 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
@@ -104,18 +104,18 @@
         
         <property name="signatureValidationConfiguration">
             <bean parent="shibboleth.BasicSignatureValidationConfiguration" 
-                p:signatureTrustEngine-ref="#{'%{sp.saml.trust.signatures:shibboleth.sp.ChainingSignatureTrustEngine}'.trim()}" />
+                p:signatureTrustEngine-ref="#{'%{sp.saml.trust.signatures:shibboleth.sp.ExplicitKeySignatureTrustEngine}'.trim()}" />
         </property>
 
         <property name="clientTLSValidationConfiguration">
             <bean parent="shibboleth.BasicClientTLSValidationConfiguration"
-                p:x509TrustEngine-ref="#{'%{sp.saml.trust.certificates:shibboleth.sp.ChainingX509TrustEngine}'.trim()}" />
+                p:x509TrustEngine-ref="#{'%{sp.saml.trust.certificates:shibboleth.sp.ExplicitKeyX509TrustEngine}'.trim()}" />
         </property>
         
         <property name="httpClientSecurityConfiguration">
             <bean parent="shibboleth.BasicHttpClientSecurityConfiguration"
                 p:clientTLSCredential="#{getObject('shibboleth.sp.DefaultClientTLSCredential')}"
-                p:TLSTrustEngine-ref="#{'%{sp.saml.trust.httpClient.tls:shibboleth.sp.ChainingX509TrustEngine}'.trim()}" />
+                p:TLSTrustEngine-ref="#{'%{sp.saml.trust.httpClient.tls:shibboleth.sp.ExplicitKeyX509TrustEngine}'.trim()}" />
         </property>
         
         <property name="encryptionConfiguration">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.