Allowing Custom Classes in the Database

EJBCA is very strict when it comes to deserialization of objects from the database, and these are checked against a whitelist. In order to use custom classes which may be saved to the database (such as extensions, etc), do the following:

1. In cesecore.properties, uncomment and edit the following line:

   #custom.class.whitelist=org.widget.Bar,org.widget.Foo

2. As properties, set each canonical class name which is to be accepted for deserialization, separated by a comma.