1- #if NETFULL
1+ using System . ServiceModel . Security ;
2+ #if NETFULL
23using ITfoxtec . Identity . Saml2 . Tokens ;
34using System ;
45using System . Collections . Generic ;
910using ITfoxtec . Identity . Saml2 . Util ;
1011using Microsoft . IdentityModel . Tokens ;
1112using System . Security . Claims ;
12- using System . ServiceModel . Security ;
1313using System . IdentityModel . Selectors ;
1414#endif
1515
@@ -48,14 +48,19 @@ public static Saml2IdentityConfiguration GetIdentityConfiguration(Saml2Configura
4848
4949 configuration . NameClaimType = ClaimTypes . NameIdentifier ;
5050
51- configuration . CertificateValidator = GetCertificateValidator ( config ) ;
51+ configuration . CertificateValidator = new Saml2CertificateValidator
52+ {
53+ CertificateValidationMode = config . CertificateValidationMode ,
54+ RevocationMode = config . RevocationMode ,
55+ } ;
5256#endif
5357
58+ SetCustomCertificateValidator ( configuration , config ) ;
59+
5460 return configuration ;
5561 }
5662
57- #if ! NETFULL
58- private static X509CertificateValidator GetCertificateValidator ( Saml2Configuration config )
63+ private static void SetCustomCertificateValidator ( Saml2IdentityConfiguration configuration , Saml2Configuration config )
5964 {
6065 if ( config . CertificateValidationMode == X509CertificateValidationMode . Custom )
6166 {
@@ -64,18 +69,9 @@ private static X509CertificateValidator GetCertificateValidator(Saml2Configurati
6469 throw new Saml2ConfigurationException ( "A CustomCertificateValidator is required when setting CertificateValidationMode = X509CertificateValidationMode.Custom" ) ;
6570 }
6671
67- return config . CustomCertificateValidator ;
68- }
69- else
70- {
71- return new Saml2CertificateValidator
72- {
73- CertificateValidationMode = config . CertificateValidationMode ,
74- RevocationMode = config . RevocationMode ,
75- } ;
72+ configuration . CertificateValidator = config . CustomCertificateValidator ;
7673 }
7774 }
78- #endif
7975
8076#if NETFULL
8177 private static AudienceRestriction GetAudienceRestriction ( bool audienceRestricted , IEnumerable < string > allowedAudienceUris )
0 commit comments