Apply cert constraints in verifyCertificateTrust as well

Closes gh-1520
This commit is contained in:
Stéphane Nicoll
2025-04-09 16:39:02 +02:00
parent 80f8d61024
commit ef00c3e2db

View File

@@ -926,6 +926,7 @@ public class Wss4jSecurityInterceptor extends AbstractWsSecurityInterceptor impl
RequestData requestData = new RequestData();
requestData.setSigVerCrypto(this.validationSignatureCrypto);
requestData.setEnableRevocation(this.enableRevocation);
requestData.setSubjectCertConstraints(this.signatureSubjectDnPatterns);
Validator validator = (this.wssConfig != null) ? this.wssConfig.getValidator(WSConstants.SIGNATURE) : null;
if (validator == null) {