Details
-
Task
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
The Crypto interface is too closely tied in to the concept of having java KeyStore objects to act as the KeyStore/TrustStore. This refactoring effort should try to abstract this interface, to make it suitable for other use-cases, e.g.:
- Just have an X509Certificate (chain) to verify inbound signatures
- Dispatch an X509Certificate to an XKMS provider for authentication.