From ef00c3e2db7f88241f2d29000150da12e8b3480f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= <stephane.nicoll@broadcom.com>
Date: Wed, 9 Apr 2025 16:39:02 +0200
Subject: [PATCH] Apply cert constraints in verifyCertificateTrust as well

Closes gh-1520
---
 .../ws/soap/security/wss4j2/Wss4jSecurityInterceptor.java        | 1 +
 1 file changed, 1 insertion(+)

diff --git a/spring-ws-security/src/main/java/org/springframework/ws/soap/security/wss4j2/Wss4jSecurityInterceptor.java b/spring-ws-security/src/main/java/org/springframework/ws/soap/security/wss4j2/Wss4jSecurityInterceptor.java
index 121d0b9c..11f59338 100644
--- a/spring-ws-security/src/main/java/org/springframework/ws/soap/security/wss4j2/Wss4jSecurityInterceptor.java
+++ b/spring-ws-security/src/main/java/org/springframework/ws/soap/security/wss4j2/Wss4jSecurityInterceptor.java
@@ -926,6 +926,7 @@ public class Wss4jSecurityInterceptor extends AbstractWsSecurityInterceptor impl
 			RequestData requestData = new RequestData();
 			requestData.setSigVerCrypto(this.validationSignatureCrypto);
 			requestData.setEnableRevocation(this.enableRevocation);
+			requestData.setSubjectCertConstraints(this.signatureSubjectDnPatterns);
 
 			Validator validator = (this.wssConfig != null) ? this.wssConfig.getValidator(WSConstants.SIGNATURE) : null;
 			if (validator == null) {