Author: bblfish
Date: Fri Apr 1 13:19:58 2011
New Revision: 1087698
URL: http://svn.apache.org/viewvc?rev=1087698&view=rev
Log:
in solving CLEREZZA-463 "create a SemWebProxy bundle" I broke the WebID
authentication for local urls and remote urls. WebID auth requires the
WebIDService as one should expect.
Modified:
incubator/clerezza/trunk/parent/platform.security.foafssl/core/src/main/scala/org/apache/clerezza/foafssl/ssl/X509TrustManagerWrapperService.scala
Modified:
incubator/clerezza/trunk/parent/platform.security.foafssl/core/src/main/scala/org/apache/clerezza/foafssl/ssl/X509TrustManagerWrapperService.scala
URL:
http://svn.apache.org/viewvc/incubator/clerezza/trunk/parent/platform.security.foafssl/core/src/main/scala/org/apache/clerezza/foafssl/ssl/X509TrustManagerWrapperService.scala?rev=1087698&r1=1087697&r2=1087698&view=diff
==============================================================================
---
incubator/clerezza/trunk/parent/platform.security.foafssl/core/src/main/scala/org/apache/clerezza/foafssl/ssl/X509TrustManagerWrapperService.scala
(original)
+++
incubator/clerezza/trunk/parent/platform.security.foafssl/core/src/main/scala/org/apache/clerezza/foafssl/ssl/X509TrustManagerWrapperService.scala
Fri Apr 1 13:19:58 2011
@@ -31,14 +31,14 @@ import org.apache.clerezza.foafssl.auth.
object X509TrustManagerWrapperService {
private val logger =
LoggerFactory.getLogger(classOf[X509TrustManagerWrapperService])
-}
-
-
+ }
+
+
class X509TrustManagerWrapperService() extends X509TrustManagerWrapper {
-
+
import X509TrustManagerWrapperService._
-
- override def wrapTrustManager(trustManager: X509TrustManager):
X509TrustManager = {
+
+ override def wrapTrustManager(trustManager: X509TrustManager):
X509TrustManager = {
new TrustAllClientsWrappingTrustManager(trustManager) {
@@ -48,23 +48,23 @@ class X509TrustManagerWrapperService() e
val webIdUriRefs =
X509Claim.getClaimedWebIds(chain(0))
if (webIdUriRefs.isEmpty) {
trustManager.checkClientTrusted(chain, authType)
- }
+ }
return
} catch {
//todo: this should be more clever,
only displaying full stack trace if requested
//todo: currently could be a denial of
service attack - by filling up your hard drive
- case ex: Throwable => {
- logger.info("can't check
client", ex)
- throw new
CertificateException("cannot check client" + ex.getMessage);
- }
+ case ex: Throwable => {
+ logger.info("can't
check client",ex)
+ throw new
CertificateException("cannot check client"+ex.getMessage);
+ }
}
}
}
}
-
+
protected def activate(context: ComponentContext) = { }
-
-
-}
-
\ No newline at end of file
+
+
+ }
+
