Fixed regression bug. Defaulting to "false" allows SPs to impersonate each other.

git-svn-id: https://subversion.switch.ch/svn/shibboleth/java-idp/trunk@1910 ab3bd59b-922f-494d-bb5f-6f0a3c29deca

diff --git a/src/edu/internet2/middleware/shibboleth/common/provider/ShibbolethTrust.java b/src/edu/internet2/middleware/shibboleth/common/provider/ShibbolethTrust.java
index 96245e2..4787673 100644 (file)
--- a/src/edu/internet2/middleware/shibboleth/common/provider/ShibbolethTrust.java
+++ b/src/edu/internet2/middleware/shibboleth/common/provider/ShibbolethTrust.java
@@ -90,7 +90,7 @@ public class ShibbolethTrust extends BasicTrust implements Trust, PluggableConfi
         */
        public boolean validate(X509Certificate certificateEE, X509Certificate[] certificateChain, RoleDescriptor descriptor) {
 
-               return validate(certificateEE, certificateChain, descriptor, false);
+               return validate(certificateEE, certificateChain, descriptor, true);
        }
 
        /*