[CXF-5075] Support for chain trust validation

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0-milestone1
• Fix Version/s: 3.0.0-milestone1
• Component/s: Services
• Estimated Complexity: Unknown
• Assignee: Andrei Shakirin
• Reporter: Achim Finke
• Created: 10/Jun/13 15:07
• Updated: 26/Nov/13 17:39
• Resolved: 17/Jun/13 08:14

Description

Provides a validator which verifies a given subject certificate followed by optional intermediate CAs.

Further Public Key Infrastructure data about intermediate and trusted CAs is taken from LDAP (filters can be configured via properties).

As result the validator returns the valid/invalid reason as IssuerTrust.

Certificate Revocation Lists are not supported yet.

Thanks to [e-mail] for supporting and reviewing.