Make X509AuthServlet extensible

[Marvin Addison]

We have a use case that requires additional certificate validation beyond
what X509AuthServlet does. Based on my analysis it looks like the easiest
point to add this additional validation is X509AuthServlet. Everything we
want to do is truly in addition to what it already does, so it seems
reasonable to suggest that the cert validation routine be factored out into
a protected method to support extension. Hopefully a diff makes the
suggestion clear:

https://gist.github.com/serac/515bc3c2ca6193b85ec9

I realize that this component may be intentionally designed to discourage
extension, but I figure it's a reasonable refactoring that increases
functionality for minimal investment. Thoughts?

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150427/f79864e6/attachment.html>