search

deansaxe / wimse-token-exchange-and-translation

Other
4 stars 3 forks source link

X509 inline #35

Closed kenmccracken-google closed 3 days ago

kenmccracken-google commented 2 weeks ago

Add support for inlining the X.509 Certificate chain in the subject_token parameter.

The format for an inlined X.509 Certificate Chain must match https://www.rfc-editor.org/rfc/rfc7515.html#section-4.1.6 , the X.509 Certificate chain must be validated to one of the pre-configured TrustAnchors for the Relying Party, and the X.509 Leaf certificate must match the one used during mTLS.

kenmccracken-google commented 3 days ago

PR #38 subsumes this PR. Closing this PR, will follow up in the new one.