Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

HTTP Public Key Pinning

Browse Source 
HTTP Public Key Pinning (HPKP) is a security mechanism which allows HTTPS websites
to resist impersonation by attackers using mis-issued or otherwise fraudulent certificates.
(For example, sometimes attackers can compromise certificate authorities,
 and then can mis-issue certificates for a web origin.)
The HTTPS web server serves a list of public key hashes, and on subsequent connections
clients expect that server to use 1 or more of those public keys in its certificate chain.

This commit will add this new functionality.

Fixes gh-3706
This commit is contained in:
Tim Ysewyn
2016-02-18 23:18:42 +01:00
committed by Rob Winch
parent 8fbc7e0d2c
commit 331c7e91b7
15 changed files with 5030 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/src/test/java/org/springframework/security/config/util/InMemoryXmlApplicationContext.java
View File

@@ -41,11 +41,11 @@ public class InMemoryXmlApplicationContext extends AbstractXmlApplicationContext
Resource inMemoryXml;
public InMemoryXmlApplicationContext(String xml) {
this(xml, "4.0", null);
this(xml, "4.1", null);
}
public InMemoryXmlApplicationContext(String xml, ApplicationContext parent) {
this(xml, "4.0", parent);
this(xml, "4.1", parent);
}
public InMemoryXmlApplicationContext(String xml, String secVersion,