Update opensaml dependency (elastic#44972)

Add a mirror of the maven repository of the shibboleth project and upgrade opensaml and related dependencies to the latest version available version Resolves: elastic#44947

Author: jkakavas

buildSrc/version.properties

@@ -29,7 +29,6 @@ joda = 2.10.4
 # - distribution/tools/plugin-cli
 # - x-pack/plugin/security
 bouncycastle = 1.61
-
 # test dependencies
 randomizedrunner = 2.7.1
 junit = 4.12

x-pack/build.gradle

@@ -4,6 +4,22 @@ import org.elasticsearch.gradle.precommit.LicenseHeadersTask
 Project xpackRootProject = project
 
 subprojects {
+
+ // We define a specific repository for opensaml since the shibboleth project doesn't publish to maven central and the
+ // artifacts that are located there are not curated/updated by the project
+ // see: https://wiki.shibboleth.net/confluence/display/DEV/Use+of+Maven+Central
+ repositories {
+ maven {
+ name "opensaml"
+ url "https://artifactory.elstc.co/artifactory/shibboleth-releases/"
+ content {
+ includeGroup "org.opensaml"
+ includeGroup "net.shibboleth.utilities"
+ includeGroup "net.shibboleth"
+ }
+ }
+ }
+
  group = 'org.elasticsearch.plugin'
  ext.xpackRootProject = xpackRootProject
  ext.xpackProject = { String projectName -> xpackRootProject.project(projectName) }

x-pack/plugin/security/build.gradle

@@ -25,25 +25,25 @@ dependencies {
  compile 'com.unboundid:unboundid-ldapsdk:4.0.8'
 
  // the following are all SAML dependencies - might as well download the whole internet
- compile "org.opensaml:opensaml-core:3.3.0"
- compile "org.opensaml:opensaml-saml-api:3.3.0"
- compile "org.opensaml:opensaml-saml-impl:3.3.0"
- compile "org.opensaml:opensaml-messaging-api:3.3.0"
- compile "org.opensaml:opensaml-messaging-impl:3.3.0"
- compile "org.opensaml:opensaml-security-api:3.3.0"
- compile "org.opensaml:opensaml-security-impl:3.3.0"
- compile "org.opensaml:opensaml-profile-api:3.3.0"
- compile "org.opensaml:opensaml-profile-impl:3.3.0"
- compile "org.opensaml:opensaml-xmlsec-api:3.3.0"
- compile "org.opensaml:opensaml-xmlsec-impl:3.3.0"
- compile "org.opensaml:opensaml-soap-api:3.3.0"
- compile "org.opensaml:opensaml-soap-impl:3.3.0"
- compile "org.opensaml:opensaml-storage-api:3.3.0"
- compile "org.opensaml:opensaml-storage-impl:3.3.0"
- compile "net.shibboleth.utilities:java-support:7.3.0"
- compile "org.apache.santuario:xmlsec:2.0.8"
+ compile "org.opensaml:opensaml-core:3.4.5"
+ compile "org.opensaml:opensaml-saml-api:3.4.5"
+ compile "org.opensaml:opensaml-saml-impl:3.4.5"
+ compile "org.opensaml:opensaml-messaging-api:3.4.5"
+ compile "org.opensaml:opensaml-messaging-impl:3.4.5"
+ compile "org.opensaml:opensaml-security-api:3.4.5"
+ compile "org.opensaml:opensaml-security-impl:3.4.5"
+ compile "org.opensaml:opensaml-profile-api:3.4.5"
+ compile "org.opensaml:opensaml-profile-impl:3.4.5"
+ compile "org.opensaml:opensaml-xmlsec-api:3.4.5"
+ compile "org.opensaml:opensaml-xmlsec-impl:3.4.5"
+ compile "org.opensaml:opensaml-soap-api:3.4.5"
+ compile "org.opensaml:opensaml-soap-impl:3.4.5"
+ compile "org.opensaml:opensaml-storage-api:3.4.5"
+ compile "org.opensaml:opensaml-storage-impl:3.4.5"
+ compile "net.shibboleth.utilities:java-support:7.5.1"
+ compile "org.apache.santuario:xmlsec:2.1.4"
  compile "io.dropwizard.metrics:metrics-core:3.2.2"
- compile ("org.cryptacular:cryptacular:1.2.0") {
+ compile ("org.cryptacular:cryptacular:1.2.3") {
  exclude group: 'org.bouncycastle'
  }
  compile "org.slf4j:slf4j-api:${versions.slf4j}"
@@ -343,7 +343,6 @@ thirdPartyAudit {
  'org.bouncycastle.crypto.digests.TigerDigest',
  'org.bouncycastle.crypto.digests.WhirlpoolDigest',
  'org.bouncycastle.crypto.engines.AESEngine',
- 'org.bouncycastle.crypto.engines.AESFastEngine',
  'org.bouncycastle.crypto.engines.BlowfishEngine',
  'org.bouncycastle.crypto.engines.CAST5Engine',
  'org.bouncycastle.crypto.engines.CAST6Engine',
@@ -369,6 +368,7 @@ thirdPartyAudit {
  'org.bouncycastle.crypto.engines.TwofishEngine',
  'org.bouncycastle.crypto.engines.VMPCEngine',
  'org.bouncycastle.crypto.engines.XTEAEngine',
+ 'org.bouncycastle.crypto.generators.BCrypt',
  'org.bouncycastle.crypto.generators.OpenSSLPBEParametersGenerator',
  'org.bouncycastle.crypto.generators.PKCS5S1ParametersGenerator',
  'org.bouncycastle.crypto.generators.PKCS5S2ParametersGenerator',

x-pack/plugin/security/licenses/cryptacular-1.2.0.jar.sha1

@@ -0,0 +1 @@
+7b0398d04a68ff7f58657938b3bdc5f2799b4b49

x-pack/plugin/security/licenses/cryptacular-1.2.3.jar.sha1

@@ -0,0 +1 @@
+c3fecaa141e8f0fff8a14e6800aefa8155c9b3e8

x-pack/plugin/security/licenses/java-support-7.3.0.jar.sha1

@@ -0,0 +1 @@
+0958fae127de9e8b0296e6f089c7451b6d5f0846