From 35d6ba874ebf42ae921a9c8a82b55bafc771a69d Mon Sep 17 00:00:00 2001
From: Thomas Lenz <tlenz@iaik.tugraz.at>
Date: Fri, 19 Sep 2014 11:09:41 +0200
Subject: update libraries  - opensaml > 2.6.3  - iaik-moa > 1.51  -
 iaik_jce_full > 5.2  - iaik_cms > 5.0

---
 id/ConfigWebTool/pom.xml                           |  12 +++++++++++
 id/server/idserverlib/pom.xml                      |  16 ++++++++++++--
 .../moa/id/auth/MOAIDAuthInitializer.java          |   8 ++-----
 .../VerifyXMLSignatureResponseValidator.java       |  24 +++++++++++++++------
 id/server/stork2-commons/pom.xml                   |  14 +++++++++---
 id/server/stork2-saml-engine/pom.xml               |   8 +++++--
 pom.xml                                            |  10 ++++-----
 repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.jar | Bin 0 -> 431543 bytes
 repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.pom |   9 ++++++++
 .../prod/iaik_jce_full/5.2/iaik_jce_full-5.2.jar   | Bin 0 -> 1123926 bytes
 .../prod/iaik_jce_full/5.2/iaik_jce_full-5.2.pom   |   9 ++++++++
 .../iaik/prod/iaik_moa/1.51/iaik_moa-1.51.jar      | Bin 0 -> 768699 bytes
 .../iaik/prod/iaik_moa/1.51/iaik_moa-1.51.pom      |   9 ++++++++
 13 files changed, 95 insertions(+), 24 deletions(-)
 create mode 100644 repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.jar
 create mode 100644 repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.pom
 create mode 100644 repository/iaik/prod/iaik_jce_full/5.2/iaik_jce_full-5.2.jar
 create mode 100644 repository/iaik/prod/iaik_jce_full/5.2/iaik_jce_full-5.2.pom
 create mode 100644 repository/iaik/prod/iaik_moa/1.51/iaik_moa-1.51.jar
 create mode 100644 repository/iaik/prod/iaik_moa/1.51/iaik_moa-1.51.pom

diff --git a/id/ConfigWebTool/pom.xml b/id/ConfigWebTool/pom.xml
index e30cad73b..ec027b497 100644
--- a/id/ConfigWebTool/pom.xml
+++ b/id/ConfigWebTool/pom.xml
@@ -104,10 +104,22 @@
         <dependency>
             <groupId>org.opensaml</groupId>
             <artifactId>opensaml</artifactId>
+            <exclusions>
+							<exclusion>
+								<groupId>org.slf4j</groupId>
+								<artifactId>log4j-over-slf4j</artifactId>
+							</exclusion>
+						</exclusions>
         </dependency>
         <dependency>
             <groupId>org.opensaml</groupId>
             <artifactId>xmltooling</artifactId>
+            <exclusions>
+							<exclusion>
+								<groupId>org.slf4j</groupId>
+								<artifactId>log4j-over-slf4j</artifactId>
+							</exclusion>
+						</exclusions>
         </dependency>
 
         <dependency>
diff --git a/id/server/idserverlib/pom.xml b/id/server/idserverlib/pom.xml
index a8ffd10bc..00d128ca5 100644
--- a/id/server/idserverlib/pom.xml
+++ b/id/server/idserverlib/pom.xml
@@ -226,11 +226,23 @@
 	<dependency>
   		<groupId>org.opensaml</groupId>
   		<artifactId>opensaml</artifactId>
-  	</dependency>  		
+  		<exclusions>
+				<exclusion>
+					<groupId>org.slf4j</groupId>
+					<artifactId>log4j-over-slf4j</artifactId>
+				</exclusion>
+			</exclusions>
+  </dependency>  		
 	<dependency>
 		<groupId>org.opensaml</groupId>
 		<artifactId>xmltooling</artifactId>
-	</dependency>
+		<exclusions>
+			<exclusion>
+				<groupId>org.slf4j</groupId>
+				<artifactId>log4j-over-slf4j</artifactId>
+			</exclusion>
+		</exclusions>
+	</dependency>  		
 
 <!-- 	<dependency>
 			<groupId>regexp</groupId>
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/MOAIDAuthInitializer.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/MOAIDAuthInitializer.java
index 80afd9f82..db36356c0 100644
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/MOAIDAuthInitializer.java
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/MOAIDAuthInitializer.java
@@ -3,7 +3,6 @@
 
 package at.gv.egovernment.moa.id.auth;
 
-import iaik.cms.ecc.IaikEccProvider;
 import iaik.pki.PKIException;
 import iaik.pki.jsse.IAIKX509TrustManager;
 import iaik.security.ecc.provider.ECCProvider;
@@ -11,12 +10,9 @@ import iaik.security.provider.IAIK;
 
 import java.io.IOException;
 import java.security.GeneralSecurityException;
-import java.security.Security;
-import java.util.Properties;
 
 import javax.activation.CommandMap;
 import javax.activation.MailcapCommandMap;
-import javax.mail.Session;
 import javax.net.ssl.SSLSocketFactory;
 
 import at.gv.egovernment.moa.id.config.ConfigurationException;
@@ -119,8 +115,8 @@ public class MOAIDAuthInitializer {
             Logger.warn(MOAIDMessageProvider.getInstance().getMessage(
                     "init.01", null), e);
         }
-
-        IAIK.addAsProvider();
+        
+        IAIK.addAsProvider();                
         ECCProvider.addAsProvider();
         
         // Initializes SSLSocketFactory store
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/validator/VerifyXMLSignatureResponseValidator.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/validator/VerifyXMLSignatureResponseValidator.java
index 2b687a0c8..284a77126 100644
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/validator/VerifyXMLSignatureResponseValidator.java
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/validator/VerifyXMLSignatureResponseValidator.java
@@ -53,6 +53,7 @@ import iaik.utils.RFC2253NameParserException;
 import iaik.x509.X509Certificate;
 import iaik.x509.X509ExtensionInitException;
 
+import java.security.InvalidKeyException;
 import java.security.PublicKey;
 import java.security.interfaces.RSAPublicKey;
 import java.util.ArrayList;
@@ -266,14 +267,25 @@ public class VerifyXMLSignatureResponseValidator {
       }
       
       //compare ECDSAPublicKeys
-      if((idl.getPublicKey()[i] instanceof iaik.security.ecc.ecdsa.ECPublicKey) && 
-         (pubKeySignature instanceof iaik.security.ecc.ecdsa.ECPublicKey)) {
+      if( ( (idl.getPublicKey()[i] instanceof java.security.interfaces.ECPublicKey) || 
+    		  (idl.getPublicKey()[i] instanceof iaik.security.ecc.ecdsa.ECPublicKey)) && 
+         ( (pubKeySignature instanceof java.security.interfaces.ECPublicKey) || 
+        		(pubKeySignature instanceof iaik.security.ecc.ecdsa.ECPublicKey) ) ) {
 
-          ECPublicKey ecdsaPubKeySignature = (ECPublicKey) pubKeySignature;
-          ECPublicKey ecdsakey = (ECPublicKey) pubKeysIdentityLink[i];
+		try {
+			ECPublicKey ecdsaPubKeySignature = new ECPublicKey(pubKeySignature.getEncoded());
+			ECPublicKey ecdsakey = new ECPublicKey(pubKeysIdentityLink[i].getEncoded());
+			
+	        if(ecdsakey.equals(ecdsaPubKeySignature))
+	              found = true;
+			
+		} catch (InvalidKeyException e) {
+			Logger.warn("ECPublicKey can not parsed into a iaik.ECPublicKey", e);
+			throw new ValidateException("validator.09", null);
+		}
           
-          if(ecdsakey.equals(ecdsaPubKeySignature))
-              found = true;
+          
+
       }
       
 //  		Logger.debug("IDL-Pubkey=" + idl.getPublicKey()[i].getClass().getName()
diff --git a/id/server/stork2-commons/pom.xml b/id/server/stork2-commons/pom.xml
index d0fd5a1ad..555d6cec7 100644
--- a/id/server/stork2-commons/pom.xml
+++ b/id/server/stork2-commons/pom.xml
@@ -13,13 +13,21 @@
 	<properties>
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<stork.version>1.4.0</stork.version>
-		<opensaml.version>2.6.2</opensaml.version>
+		<opensaml.version>2.6.3</opensaml.version>
 	</properties>
 	<version>${stork.version}</version>
   <description>
         The STORKCommons library provides beans, Java Interfaces and utility classes to integrate PEPS and SAML Engine.
   </description>
    
+  <repositories>
+		<repository>
+			<id>shibboleth.internet2.edu</id>
+			<name>Internet2</name>
+			<url>https://build.shibboleth.net/nexus/content/groups/public/</url>
+		</repository>
+	</repositories> 
+   
 	<dependencies>
 
 		<!-- Joda -->
@@ -55,8 +63,8 @@
 		</dependency>
 
 		<dependency>
-			<groupId>org.opensaml</groupId>
-			<artifactId>opensaml</artifactId>
+  		<groupId>org.opensaml</groupId>
+  		<artifactId>opensaml</artifactId>
 			<exclusions>
 				<exclusion>
 				    <groupId>org.slf4j</groupId>
diff --git a/id/server/stork2-saml-engine/pom.xml b/id/server/stork2-saml-engine/pom.xml
index 89ddab22a..30f2bff7c 100644
--- a/id/server/stork2-saml-engine/pom.xml
+++ b/id/server/stork2-saml-engine/pom.xml
@@ -49,12 +49,12 @@
 			<groupId>eu.stork</groupId>
 			<artifactId>Commons</artifactId>
 			<version>${commons.version}</version>
-			<exclusions>
+<!-- 			<exclusions>
 				<exclusion>
 					<groupId>org.bouncycastle</groupId>
 					<artifactId>bcprov-jdk16</artifactId>				
 				</exclusion>
-			</exclusions>
+			</exclusions> -->
 		</dependency>
 
 		<dependency>
@@ -82,6 +82,10 @@
 					<groupId>org.slf4j</groupId>
 					<artifactId>jul-to-slf4j</artifactId>
 				</exclusion>
+				<exclusion>
+					<artifactId>bcprov-jdk15on</artifactId>
+					<groupId>org.bouncycastle</groupId>
+				</exclusion>
 			</exclusions>
 		</dependency>
 
diff --git a/pom.xml b/pom.xml
index cac36a91c..bed1565c6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -145,12 +145,12 @@
 			<dependency>
   				<groupId>org.opensaml</groupId>
   				<artifactId>opensaml</artifactId>
-  				<version>2.6.1</version>
+  				<version>2.6.3</version>
   			</dependency>  		
 			<dependency>
 				<groupId>org.opensaml</groupId>
 				<artifactId>xmltooling</artifactId>
-				<version>1.4.1</version>
+				<version>1.4.3</version>
 			</dependency>
 
 
@@ -309,19 +309,19 @@
                 <groupId>iaik.prod</groupId>
                 <artifactId>iaik_jce_full</artifactId>
                 <!-- <version>4.0_MOA</version>-->
-                <version>5.101</version>
+                <version>5.2</version>
                 <scope>compile</scope>
             </dependency>
             <dependency>
                 <groupId>iaik.prod</groupId>
                 <artifactId>iaik_moa</artifactId>
-                <version>1.5</version>
+                <version>1.51</version>
                 <scope>compile</scope>
             </dependency>
             <dependency>
                 <groupId>iaik.prod</groupId>
                 <artifactId>iaik_cms</artifactId>
-                <version>4.1_MOA</version>
+                <version>5.0</version>
                 <scope>compile</scope>
             </dependency>
             <dependency>
diff --git a/repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.jar b/repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.jar
new file mode 100644
index 000000000..cecf54927
Binary files /dev/null and b/repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.jar differ
diff --git a/repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.pom b/repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.pom
new file mode 100644
index 000000000..f279a300b
--- /dev/null
+++ b/repository/iaik/prod/iaik_cms/5.0/iaik_cms-5.0.pom
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+  <modelVersion>4.0.0</modelVersion>
+  <groupId>iaik.prod</groupId>
+  <artifactId>iaik_cms</artifactId>
+  <version>5.0</version>
+  <description>POM was created from install:install-file</description>
+</project>
diff --git a/repository/iaik/prod/iaik_jce_full/5.2/iaik_jce_full-5.2.jar b/repository/iaik/prod/iaik_jce_full/5.2/iaik_jce_full-5.2.jar
new file mode 100644
index 000000000..c10f494ff
Binary files /dev/null and b/repository/iaik/prod/iaik_jce_full/5.2/iaik_jce_full-5.2.jar differ
diff --git a/repository/iaik/prod/iaik_jce_full/5.2/iaik_jce_full-5.2.pom b/repository/iaik/prod/iaik_jce_full/5.2/iaik_jce_full-5.2.pom
new file mode 100644
index 000000000..f12cc5542
--- /dev/null
+++ b/repository/iaik/prod/iaik_jce_full/5.2/iaik_jce_full-5.2.pom
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+  <modelVersion>4.0.0</modelVersion>
+  <groupId>iaik.prod</groupId>
+  <artifactId>iaik_jce_full</artifactId>
+  <version>5.2</version>
+  <description>POM was created from install:install-file</description>
+</project>
diff --git a/repository/iaik/prod/iaik_moa/1.51/iaik_moa-1.51.jar b/repository/iaik/prod/iaik_moa/1.51/iaik_moa-1.51.jar
new file mode 100644
index 000000000..3e94e44a5
Binary files /dev/null and b/repository/iaik/prod/iaik_moa/1.51/iaik_moa-1.51.jar differ
diff --git a/repository/iaik/prod/iaik_moa/1.51/iaik_moa-1.51.pom b/repository/iaik/prod/iaik_moa/1.51/iaik_moa-1.51.pom
new file mode 100644
index 000000000..ccfb5558c
--- /dev/null
+++ b/repository/iaik/prod/iaik_moa/1.51/iaik_moa-1.51.pom
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+  <modelVersion>4.0.0</modelVersion>
+  <groupId>iaik.prod</groupId>
+  <artifactId>iaik_moa</artifactId>
+  <version>1.51</version>
+  <description>POM was created from install:install-file</description>
+</project>
-- 
cgit v1.2.3