checkTrustAnchorSignature unimplemented and unused

[J08nY]

The checkTrustAnchorSignature method in GatewayDataDownloadBtpServiceImpl is unimplemented but returns true. Furthermore the method is unused.

dgca-businessrule-service/src/main/java/eu/europa/ec/dgc/businessrule/service/GatewayDataDownloadBtpServiceImpl.java

Lines 294 to 297 in 6e87451

	private boolean checkTrustAnchorSignature(TrustListItemDto trustListItemDto) {
	// Implement me...
	return true;
	}

It is possible that this functionality does not need to verify the trust anchor signatures to work securely or that it is done elsewhere but this is still a big code smell and should be handled. (Returning true from a signature verification method that is not implemented is just dangerous!)

[jurosens]

It is a bug and will be fixed soon.