[WSS-395] Support Certificate Constraints on the Subject DN of the certificate used for signature validation

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.6
• Fix Version/s: 1.6.7
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 22/Jun/12 15:13
• Updated: 31/Jul/12 16:36
• Resolved: 22/Jun/12 16:13

Description

This task is to support the concept of applying a cert contraint to the subject DN of a certificate used for signature validation. The user should be able to configure a list of regular expressions, one of which must match the subject DN of the certificate used for signature validation. These constraints are not used when the certificate is contained in the keystore (direct trust).