[CXF-3152] Add support for processing a PKI Certificate Chain

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3, 2.2.11
• Fix Version/s: 2.2.12, 2.3.1, 2.4
• Component/s: WS-* Components
• Assignee: Daniel Kulp
• Reporter: Colm O hEigeartaigh
• Created: 24/Nov/10 15:15
• Updated: 02/May/13 02:29
• Resolved: 30/Nov/10 21:29

Description

WSS4J 1.5.10 has added support for processing a BinarySecurityToken that contains a PKI Certificate Chain. CXF must be updated to verify trust on the certificate chain associated with Signature verification.

Issue Links

• depends upon: WSS-40 WSSecurityEngine does not support chained certificates