Treat DSA keys in metadata as errors

See ukf/ukf-meta#117.
InCommon · Dec 18, 2018 · 8417088 · 8417088
1 parent 4619daa
commit 8417088
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 0 deletions.
diff --git a/mdx/common-beans.xml b/mdx/common-beans.xml
@@ -1073,6 +1073,9 @@
                 <bean id="checkCertificates" parent="mda.X509ValidationStage">
                     <property name="validators">
                         <list>
+                            <!-- Error on DSA keys. -->
+                            <bean p:id="DSA" parent="ukf.X509DSADetector"/>
+
                             <!-- Error on RSA key length less than 2048 bits. -->
                             <bean p:id="RSAKeyLength" parent="mda.X509RSAKeyLengthValidator"
                                 p:warningBoundary="0" p:errorBoundary="2048"/>

diff --git a/mdx/uk/beans.xml b/mdx/uk/beans.xml
@@ -368,6 +368,9 @@
                 <bean id="checkCertificates" parent="mda.X509ValidationStage">
                     <property name="validators">
                         <list>
+                            <!-- Error on DSA keys. -->
+                            <bean p:id="DSA" parent="ukf.X509DSADetector"/>
+
                             <!-- Error on RSA key length less than 2048 bits. -->
                             <bean p:id="RSAKeyLength" parent="mda.X509RSAKeyLengthValidator"
                                 p:warningBoundary="0" p:errorBoundary="2048"/>

diff --git a/mdx/uk/verbs.xml b/mdx/uk/verbs.xml
@@ -335,6 +335,9 @@
                 <bean id="checkCertificates" parent="mda.X509ValidationStage">
                     <property name="validators">
                         <list>
+                            <!-- Error on DSA keys. -->
+                            <bean p:id="DSA" parent="ukf.X509DSADetector"/>
+
                             <!-- Error on RSA key length less than 2048 bits. -->
                             <bean p:id="RSAKeyLength" parent="mda.X509RSAKeyLengthValidator"
                                 p:warningBoundary="0" p:errorBoundary="2048"/>

diff --git a/tools/ukf-mda/ukf-mda-0.9.7.jar → tools/ukf-mda/ukf-mda-0.9.8.jar b/tools/ukf-mda/ukf-mda-0.9.7.jar → tools/ukf-mda/ukf-mda-0.9.8.jar