[WSS-287] No longer use keystore for truststore purposes if the latter is explicitly specified.

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.6
• Fix Version/s: 1.6.1
• Assignee: Colm O hEigeartaigh
• Reporter: Glen Mazza
• Created: 19/May/11 16:35
• Updated: 03/Jun/11 16:40
• Resolved: 01/Jun/11 16:54

Description

According to this blog entry: http://coheigea.blogspot.com/2011/01/wss4j-16-crypto-property-change.html

Quote: "One final note - when building a validation chain to validate a received credential, WSS4J uses both the truststore and the keystore. This is for backwards compatibility reasons, where the user does not specify a truststore using the new config."

Recommend switching this algorithm to not use the keystore for validation if the truststore is explicitly validated.