ffang opened a new pull request, #3688: URL: https://github.com/apache/cxf/pull/3688
…ders When rs.security.keystore.alias is set, the verification certificate is taken from it also when the x5c, x5t or x5t#S256 headers are present, as the alias already selects the key with a "jwk" key store. An x5c certificate issued by the certificate of the alias is accepted. The new rs.security.accept.x509.key.headers property keeps the previous key selection, and JWTTokenValidator sets it when allowX509KeyHeaders is enabled. The x5c certificate chain validation now uses the message passed in rather than the current message. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
