Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add x5c header key finder #338

Merged
merged 2 commits into from
Dec 28, 2021
Merged

Add x5c header key finder #338

merged 2 commits into from
Dec 28, 2021

Commits on Dec 28, 2021

  1. Add x5c header key finder 

    This validates the certificate chain in accordance with RFC 5280, as described
in RFC 7515 section 4.1.6.

To use this in your app, here are a couple of notes:
- you will want to cache the relevant CRL file(s) and make sure the cache is
  expired by the OpenSSL::X509::CRL#next_update timestamp
- in case you need to dynamically extract the CRL distribution point URIs from
  the x5c certificates, it is possible to use the X5cKeyFinder class directly
  in the keyfinder block argument passed to JWT.decode
    @bdewater
    bdewater committed Dec 28, 2021
    Configuration menu
    Copy the full SHA
    d3cd235 View commit details
    Browse the repository at this point in the history

  2. Extract algorithm checks to lower percieved complexity

    @bdewater
    bdewater committed Dec 28, 2021
    Configuration menu
    Copy the full SHA
    cef8c4e View commit details
    Browse the repository at this point in the history