[WSS-340] support Certificates revocation check before encrypt on sender side

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.4
• Fix Version/s: 1.6.5
• Assignee: Colm O hEigeartaigh
• Reporter: Freeman Yue Fang
• Created: 15/Feb/12 09:16
• Updated: 05/Mar/12 13:21
• Resolved: 17/Feb/12 15:12

Description

currently WSS4J can support Certificates revocation check(CRL and OCSP) when receiver side validate a signature. Similarly WSS4J should also support Certificates revocation check before encrypt on sender side, as in both case it's possible to use a revoked certificate. We can do it in EncryptionAction where we can load encrypt crypto and use the verifyTrust(certs, enableRevocation, enableOCSP) already there.