X.509 certificate check on imported entities: nothing shorter than 10…

…24 bits.
internet2 · Nov 14, 2013 · b46dfdd · b46dfdd
1 parent 8889173
commit b46dfdd
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/mdx/common-beans.xml b/mdx/common-beans.xml
@@ -918,6 +918,18 @@
                 <ref bean="removeEmptyExtensions"/>
                 <ref bean="checkSchemas"/>
                 <ref bean="CHECK_imported"/>
+
+                <bean parent="X509CertificateValidationStage"
+                    p:id="checkCertificates">
+                    <property name="validators">
+                        <list>
+                            <!-- Error on RSA key length less than 1024 bits. -->
+                            <bean parent="X509CertificateRSAKeyLengthValidator"
+                                p:warningBoundary="0" p:errorBoundary="1024"/>
+                        </list>
+                    </property>
+                </bean>
+
             </list>
         </property>
     </bean>