| | ConcatKDF parameter requirements too restrictive in ECDH | | | | | Unresolved | Jun 27, 2022 | Jun 30, 2022 | | |
| | Suffix the PROTOCOL_MESSAGE category with .SAML | | | | | Unresolved | Jun 17, 2022 | Jun 30, 2022 | | |
| | Move IdP Spring support for credentials/trust into new module | | | | | Unresolved | Jun 8, 2022 | Jun 8, 2022 | | |
| | Move OpenSAML config bean class from IdP into profile-api | | | | | Unresolved | May 3, 2022 | May 3, 2022 | | |
| | Tweak AbstractEncryptedKeyResolver to be more subclass friendly. | | | | | Done | Apr 5, 2022 | Apr 15, 2022 | | |
| | Version.getVersion() does not work when using JPMS | | | | | Unresolved | Jan 27, 2022 | Jan 27, 2022 | | |
| | SAML Assertion signature validation should evaluate algorithm policy | | | | | Fixed | Jan 26, 2022 | Mar 2, 2022 | | |
| | Eliminate use of self-hosted MDQ server for unit tests | | | | | Completed | Jan 21, 2022 | Feb 17, 2022 | | |
| | Assertion validator is not checking IssueInstant | | | | | Fixed | Dec 22, 2021 | Mar 3, 2022 | | |
| | JPAStorageService readContexts fails under Hibernate 6 with "locking with DISTINCT is not supported" | | | | | Unresolved | Dec 22, 2021 | Jun 17, 2022 | | |
| | Exclude JAXB from xmlsec dependencies | | | | | Completed | Oct 20, 2021 | Mar 29, 2022 | | |
| | Investigate Strategies to end of life our use of Hibernate in V5 | | | | | Completed | Sep 16, 2021 | Jun 17, 2022 | | |
| | DiscoveryResponseBuilder defaults to wrong Namespace prefix and URI | | | | | Fixed | Aug 24, 2021 | Apr 15, 2022 | | |
| | Logger instances improvement | | | | | Unresolved | Aug 17, 2021 | Aug 17, 2021 | | |
| | Add config prop for global ECDH KDF | | | | | Completed | Jul 26, 2021 | Jul 26, 2021 | | |
| | Add ConfigurationPropertiesSource based on system props, and default it | | | | | Completed | Jul 26, 2021 | Jul 26, 2021 | | |
| | The storage-impl POM has compile-time Spring deps | | | | | Fixed | Jul 20, 2021 | Jul 26, 2021 | | |
| | X.509 certificate access should include support for jakarta attribute | | | | | Completed | Apr 21, 2021 | Mar 4, 2022 | | |
| | Mitigation for bad logger implementation | |
Unidentified Legacy Account | | | Completed | Mar 23, 2021 | Feb 17, 2022 | | |
| | Support encryption via classic Diffie-Hellman key agreement | | | | | Completed | Mar 9, 2021 | Mar 9, 2021 | | |
| | JPA StorageService issue with mariadb | | | | | Unresolved | Jan 19, 2021 | Jan 19, 2021 | | |
| | EntityAttributes Filter failing for Dynamic metadata providers | | | | | Duplicate | Jan 15, 2021 | Mar 2, 2021 | | |
| | IPv6 support with or without brackets around address | | | | | Duplicate | Jan 12, 2021 | Jan 12, 2021 | | |
| | NPE in IndexedXMLObjectChildrenList | | | | | Fixed | Nov 10, 2020 | Mar 24, 2021 | | |
| | PKIXX509CredentialTrustEngine 2-arg ctor has error in this() call | | | | | Fixed | Oct 30, 2020 | Oct 30, 2020 | | |
| | Decrypter does not log the decrypted XML | | | | | Fixed | Oct 26, 2020 | Oct 26, 2020 | | |
| | Invalid backingFile causes MetadataResolver initialization to fail | |
Unidentified Legacy Account | | | Fixed | Oct 20, 2020 | Aug 6, 2021 | | |
| | XMLObjectSupport cloneXMLObject should not marshall input if DOM already exists | | | | | Fixed | Oct 1, 2020 | Oct 2, 2020 | | |
| | HttpClient configured TLS trust engine is not evaluated on TLS session resumption | | | | | Fixed | Aug 17, 2020 | Nov 13, 2020 | | |
| | EntityAttributes filter breaking adding values to existing Attribute | | | | | Fixed | Jul 10, 2020 | Mar 22, 2021 | | |
| | Tests failing under Java 15 due to Nashorn removal | | | | | Fixed | Jun 19, 2020 | Jun 22, 2020 | | |
| | Test failure: Legacy SunEC curve disabled under Java 15 | | | | | Fixed | Jun 19, 2020 | Sep 18, 2020 | | |
| | Deprecate terms from classes and configuration | | | | | Completed | Jun 9, 2020 | Mar 19, 2021 | | |
| | Update xmlsec to 2.3 | | | | | Done | May 26, 2020 | Apr 15, 2022 | | |
| | Tighten Metadata schema to disallow empty elements. | | | | | Done | May 21, 2020 | Mar 22, 2021 | | |
| | Migrate any tests accessing shibboleth.net to test.shibboleth.net | | | | | Fixed | Apr 29, 2020 | May 28, 2020 | | |
| | Decrypted assertion's signature not verifiable due to IDness bug | | | | | Fixed | Apr 17, 2020 | May 27, 2020 | | |
| | Support Santuario's XMLParser interface | | | | | Unresolved | Apr 3, 2020 | Jun 1, 2020 | | |
| | SOAP XMLObject providers for WS-Fed are broken | | | | | Unresolved | Apr 2, 2020 | Apr 2, 2020 | | |
| | AbstractDynamicMetadataResolver clear() doesn't reset negative lookup cache | | | | | Fixed | Mar 20, 2020 | Mar 20, 2020 | | |
| | MetadataFilter to remove in-line images (e.g. logos) | | | | | Unresolved | Mar 17, 2020 | Mar 5, 2021 | | |
| | Support hash-based directory structure in LocalDynamic | | | | | Completed | Mar 9, 2020 | Nov 6, 2020 | | |
| | Manual creation of StorageRecords table? | | | | | Invalid | Mar 3, 2020 | Mar 5, 2020 | | |
| | outgoing MDQ request may not use the correct Accept header | | | | | Fixed | Feb 26, 2020 | Mar 3, 2020 | | |
| | Deprecation of HttpClient X509HostnameVerifier interface | | | | | Fixed | Feb 15, 2020 | Feb 19, 2020 | | |
| | Enhance AlgorithmRegistry to support lookup by AlgorithmType | | | | | Completed | Feb 12, 2020 | Feb 14, 2020 | | |
| | Algorithm MetadataFilter should sanity check algorithm URIs | | | | | Fixed | Feb 12, 2020 | Mar 11, 2020 | | |
| | Replace use of finalize() in X509Certificate and X509CRL impls | | | | | Fixed | Feb 7, 2020 | Feb 19, 2020 | | |
| | Javadoc plugin being held to older version | | | | | Completed | Jan 28, 2020 | Mar 22, 2022 | | |
| | EntropyUnmarshaller makes a wrong ClassCast | |
Unidentified Legacy Account | | | Fixed | Jan 3, 2020 | Jun 24, 2021 | | |
