Update opensaml dependency

Add the maven repository of the shibboleth project in a couple of
places ( x-pack:plugin and x-pack:qa subprojects ) so that we can
upgrade opensaml and related dependencies to the latest version

Relates: elastic#44947

Author: jkakavas

buildSrc/version.properties

@@ -28,7 +28,8 @@ joda              = 2.10.2
 #  - distribution/tools/plugin-cli
 #  - x-pack/plugin/security
 bouncycastle      = 1.61
-
+# When updating this version, please review all other SAML dependencies in x-pack/plugin/security
+opensaml          = 3.4.3
 # test dependencies
 randomizedrunner  = 2.7.1
 junit             = 4.12

x-pack/plugin/build.gradle

@@ -4,6 +4,21 @@ apply plugin: 'elasticsearch.rest-test'
 
 archivesBaseName = 'x-pack'
 
+subprojects {
+  // We define a specific reposiroty for opensaml since the shibboleth project doesn't publish to maven central and the
+  // artifacts that are located there are not curated/updated by the project
+  // see: https://wiki.shibboleth.net/confluence/display/DEV/Use+of+Maven+Central
+  repositories {
+    maven {
+      name "opensaml"
+      url "https://build.shibboleth.net/nexus/content/repositories/releases/"
+      content {
+        includeGroup "org.opensaml"
+        includeGroup "net.shibboleth.utilities"
+      }
+    }
+  }
+}
 dependencies {
   testCompile project(path: xpackModule('core'), configuration: 'testArtifacts')
   if (isEclipse) {

x-pack/plugin/security/build.gradle

@@ -26,29 +26,29 @@ dependencies {
     }
 
     compile 'com.unboundid:unboundid-ldapsdk:4.0.8'
-    compileOnly 'org.bouncycastle:bcprov-jdk15on:1.59'
-    compileOnly 'org.bouncycastle:bcpkix-jdk15on:1.59'
+    compileOnly "org.bouncycastle:bcprov-jdk15on:${versions.bouncycastle}"
+    compileOnly "org.bouncycastle:bcpkix-jdk15on:${versions.bouncycastle}"
 
     // the following are all SAML dependencies - might as well download the whole internet
-    compile "org.opensaml:opensaml-core:3.3.0"
-    compile "org.opensaml:opensaml-saml-api:3.3.0"
-    compile "org.opensaml:opensaml-saml-impl:3.3.0"
-    compile "org.opensaml:opensaml-messaging-api:3.3.0"
-    compile "org.opensaml:opensaml-messaging-impl:3.3.0"
-    compile "org.opensaml:opensaml-security-api:3.3.0"
-    compile "org.opensaml:opensaml-security-impl:3.3.0"
-    compile "org.opensaml:opensaml-profile-api:3.3.0"
-    compile "org.opensaml:opensaml-profile-impl:3.3.0"
-    compile "org.opensaml:opensaml-xmlsec-api:3.3.0"
-    compile "org.opensaml:opensaml-xmlsec-impl:3.3.0"
-    compile "org.opensaml:opensaml-soap-api:3.3.0"
-    compile "org.opensaml:opensaml-soap-impl:3.3.0"
-    compile "org.opensaml:opensaml-storage-api:3.3.0"
-    compile "org.opensaml:opensaml-storage-impl:3.3.0"
-    compile "net.shibboleth.utilities:java-support:7.3.0"
-    compile "org.apache.santuario:xmlsec:2.0.8"
+    compile "org.opensaml:opensaml-core:${versions.opensaml}"
+    compile "org.opensaml:opensaml-saml-api:${versions.opensaml}"
+    compile "org.opensaml:opensaml-saml-impl:${versions.opensaml}"
+    compile "org.opensaml:opensaml-messaging-api:${versions.opensaml}"
+    compile "org.opensaml:opensaml-messaging-impl:${versions.opensaml}"
+    compile "org.opensaml:opensaml-security-api:${versions.opensaml}"
+    compile "org.opensaml:opensaml-security-impl:${versions.opensaml}"
+    compile "org.opensaml:opensaml-profile-api:${versions.opensaml}"
+    compile "org.opensaml:opensaml-profile-impl:${versions.opensaml}"
+    compile "org.opensaml:opensaml-xmlsec-api:${versions.opensaml}"
+    compile "org.opensaml:opensaml-xmlsec-impl:${versions.opensaml}"
+    compile "org.opensaml:opensaml-soap-api:${versions.opensaml}"
+    compile "org.opensaml:opensaml-soap-impl:${versions.opensaml}"
+    compile "org.opensaml:opensaml-storage-api:${versions.opensaml}"
+    compile "org.opensaml:opensaml-storage-impl:${versions.opensaml}"
+    compile "net.shibboleth.utilities:java-support:7.5.0"
+    compile "org.apache.santuario:xmlsec:2.1.4"
     compile "io.dropwizard.metrics:metrics-core:3.2.2"
-    compile "org.cryptacular:cryptacular:1.2.0"
+    compile "org.cryptacular:cryptacular:1.2.3"
     compile "org.slf4j:slf4j-api:${versions.slf4j}"
     compile "org.apache.logging.log4j:log4j-slf4j-impl:${versions.log4j}"
     compile "org.apache.httpcomponents:httpclient:${versions.httpclient}"

x-pack/plugin/security/licenses/cryptacular-1.2.0.jar.sha1

@@ -0,0 +1 @@
+7b0398d04a68ff7f58657938b3bdc5f2799b4b49

x-pack/plugin/security/licenses/cryptacular-1.2.3.jar.sha1

@@ -0,0 +1 @@
+5540e04eca8dfaa6c3dca6328e7e0417487edcac

x-pack/plugin/security/licenses/java-support-7.3.0.jar.sha1

@@ -0,0 +1 @@
+406eedd86ea88c1442a6b1c7625a45cf696b9f55

x-pack/plugin/security/licenses/java-support-7.5.0.jar.sha1

@@ -0,0 +1 @@
+18f68283a3729e4355a29936861f6472ab20b2be

x-pack/plugin/security/licenses/opensaml-core-3.3.0.jar.sha1

@@ -0,0 +1 @@
+d0cd65f2b0a167dc25477245adf5417a8735e132

x-pack/plugin/security/licenses/opensaml-core-3.4.3.jar.sha1

@@ -0,0 +1 @@
+8daff1c6b7ff47178054e17e78b0d4b19b622434

x-pack/plugin/security/licenses/opensaml-messaging-api-3.3.0.jar.sha1

@@ -0,0 +1 @@
+175bd3d0ba07a17f0222ea799c3971119c9b32b3

x-pack/plugin/security/licenses/opensaml-messaging-api-3.4.3.jar.sha1

@@ -0,0 +1 @@
+b2c68a7265e8b059ecbfff0ac6525720cd3e1a86

x-pack/plugin/security/licenses/opensaml-messaging-impl-3.3.0.jar.sha1

@@ -0,0 +1 @@
+c4bce04bec8fd065bbc014a2c4003172ec612ba6

x-pack/plugin/security/licenses/opensaml-messaging-impl-3.4.3.jar.sha1

@@ -0,0 +1 @@
+b6878bd144c15612ab899643e561e52f04d332c1

x-pack/plugin/security/licenses/opensaml-profile-api-3.3.0.jar.sha1

@@ -0,0 +1 @@
+72edf27dbce57ed29aebab8563a41942f7f15527

x-pack/plugin/security/licenses/opensaml-profile-api-3.4.3.jar.sha1

@@ -0,0 +1 @@
+4fe18269fff79f7172d9dbe0d421886282baa434

x-pack/plugin/security/licenses/opensaml-profile-impl-3.3.0.jar.sha1

@@ -0,0 +1 @@
+9a1b9bc0ed6a0c62f3f607cc2c1164c76a57303e

x-pack/plugin/security/licenses/opensaml-profile-impl-3.4.3.jar.sha1

@@ -0,0 +1 @@
+80ff32a3df660fe71527f293a317813c51375dcc

x-pack/plugin/security/licenses/opensaml-saml-api-3.3.0.jar.sha1

@@ -0,0 +1 @@
+da2116186a10ba5e1adecf2445184bf1feb1aa1c

x-pack/plugin/security/licenses/opensaml-saml-api-3.4.3.jar.sha1

@@ -0,0 +1 @@
+b7f0f8a9c17997008bcef75a8886faeb5e9d9ea9

x-pack/plugin/security/licenses/opensaml-saml-impl-3.3.0.jar.sha1

@@ -0,0 +1 @@
+3dbdf38773a07d37f013dc9a2ecc4d0295a724de

x-pack/plugin/security/licenses/opensaml-saml-impl-3.4.3.jar.sha1

@@ -0,0 +1 @@
+cb43326f02e3e77526c24269c8b5d3cc3f7f6653

x-pack/plugin/security/licenses/opensaml-security-api-3.3.0.jar.sha1

@@ -24,4 +24,18 @@ subprojects {
       include 'rest-api-spec/api/**'
     }
   }
+
+  // We define a specific reposiroty for opensaml since the shibboleth project doesn't publish to maven central and the
+  // artifacts that are located there are not curated/updated by the project
+  // see: https://wiki.shibboleth.net/confluence/display/DEV/Use+of+Maven+Central
+  repositories {
+    maven {
+      name "opensaml"
+      url "https://build.shibboleth.net/nexus/content/repositories/releases/"
+      content {
+        includeGroup "org.opensaml"
+        includeGroup "net.shibboleth.utilities"
+      }
+    }
+  }
 }

x-pack/plugin/security/licenses/opensaml-security-api-3.4.3.jar.sha1

@@ -1,6 +1,5 @@
 import java.nio.file.Path
 import java.nio.file.Paths
-import java.nio.file.Files
 
 apply plugin: 'elasticsearch.testclusters'
 apply plugin: 'elasticsearch.standalone-rest-test'