Shib IdP - Metadata Download and Java 1.7.0_85

[Peter Schober]

* Brent Putman <putmanb at georgetown.edu> [2015-07-23 08:20]:
> I'm flabbergasted.

Indeed.

Thanks everyone for checking, esp. Takeshi!

> As an aside, I don't see how their own X509TrustManagerImpl endpoint
> identification stuff (above) can work with this change, which is partly
> why I think it might have been an unintentional side effect of other
> changes. (Unless they do something even more egregious, like resolve
> the hostname(s) from the cert to IP addresses and match against those.
> Surely they can't be that daft...).

That would just break the other 99.9% of the web, presumably.

And people complain about Tomcat making breaking changes in patch
releases... ;)
-peter