You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@santuario.apache.org by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2026/08/20 08:31:00 UTC

[jira] [Created] (SANTUARIO-635) Make secure validation more granular

Colm O hEigeartaigh created SANTUARIO-635:
---------------------------------------------

             Summary: Make secure validation more granular
                 Key: SANTUARIO-635
                 URL: https://issues.apache.org/jira/browse/SANTUARIO-635
             Project: Santuario
          Issue Type: Improvement
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
             Fix For: Java 4.1.0


Apache Santuario currently just has a boolean System property whether to allow secure validation or not. The problem is if you want to support an algorithm which is blocked by secure validation, you have no option but to disable secure validation and lose the additional security benefits.

Java follows a more granular approach [https://github.com/openjdk/shenandoah/blob/9065ccbd6fb9686d7c0ebb18894049e555603335/src/java.base/share/conf/security/java.security#L982] allowing to define a policy. We should consider introducing new System properties in Santuario that allow you to keep secure validation enabled but also override specific values.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)