From 09/03/2009 to 10/02/2009


10:49 AM Improvement #37: PDP doesn't handle spepIdentifier renames correctly
Would be nice to have the PDP handle spepIdentifier renames correctly. At the moment, it won't pick up a change of spepIdentifier until ESOE is restarted. Low priority improvement, since there is no supported way to change an spepIdentifier yet. S M


11:31 AM Improvement #36: Apache hangs if a request has been received before spepd has finished starting.
The Apache module will wait indefinitely for spepd to accept its connection and cause the user agent to hang while waiting. If all Apache worker processes/threads are exhausted waiting for spepd to come up, startup will fail as ESOE will be unable... S M


10:35 AM Bug #35: Metadata sources are untrusted by default
By default, metadata sources are flagged as untrusted, which means they are unmarshalled without signature validation. This could create a vulnerability in certain situations, though it is mitigated by using https on the metadata endpoint. S M
« Previous
Next »

Also available in: Atom