Finalizing TrustEngine config
Cantor, Scott
cantor.2 at osu.edu
Thu Jun 19 10:27:53 EDT 2014
On 6/19/14, 9:37 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>This is somewhat tangentially related.
>
>Brent and I discussed this some time ago. We need a centralized placed to
>pull together the default key info providers.
>
>Currently the custom schema parsers create this list by hand, and I see an
>equivalent list in relying-party-system.xml. I'm guessing that the trust
>engines Scott is talking of adding will need them too.
The common factor seems to be the default list, independent of what
they're being loaded into, because that part is different in each case.
Basically this:
<util:list>
<bean
class="org.opensaml.xmlsec.keyinfo.impl.provider.RSAKeyValueProvider" />
<bean
class="org.opensaml.xmlsec.keyinfo.impl.provider.DSAKeyValueProvider" />
<bean
class="org.opensaml.xmlsec.keyinfo.impl.provider.DEREncodedKeyValueProvider
" />
<bean
class="org.opensaml.xmlsec.keyinfo.impl.provider.InlineX509DataProvider" />
</util:list>
>Would it be sensible to create a single centralized bean with this in? If
>so, where and what do we call it?
It would depend on what needs it. Right now, I use it in
relying-party-system.xml, and my hope was to move the trust engine config
there as well.
If the custom parser you mean is the RelyingParty one, that means we'd
need it in the profile-defaults config. Is that it?
-- Scott
More information about the dev
mailing list