swedenconnect / opensaml-pkcs11 Goto Github PK

In attempts to get this to work with Amzon Cloud HSM we have come across alternative ways to extract private key objects in Java from the HSM for use in OpenSAML credentials.

There is a need to amend the constructor of OpenSAML credentials where it is possible to provide a map of private key objects (indexed under the provider name). If this map is provided in the consturctor, then these keys will be used and the standard implementation for extracting the keys currently in use will be bypassed.

The javadoc for the getPrivateKey method of the PKCS11NoTestCredential class is not correct. It does not provide any test for the key. Will be fixed in the next version.

The way to instantiate a SunPKCS11 provider with config data is incompatible between Java 8 and Java 9+

To make this code agnostic about java version, the actual creation of a SunPKCS11 instance is removed from the code and replaced by an interface which must be implemented by the application using this library. A fix to this problem will be provided in version 1.1.0.

This change will be backwards incompatible with version 1.0.1.

OpenSAML 3 will soon be end of life and we should port the library to OpenSAML 4.