safebox/guacamole-client
4
0
Fork 0
mirror of https://github.com/gyurix1968/guacamole-client.git synced 2025-09-07 13:41:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

GUACAMOLE-839: Use BouncyCastle for retrieval of certificate details.

Browse Source 
Java's build-in support for reading X.509 certificates does not deal
well with PIV certificates containing the username as a "serialNumber"
attribute. Rather than exposing the string value of that attribute, the
Java implementation exposes a byte array that does not fully match the
string value shown by a tool like OpenSSL.

BouncyCastle, on the other hand, _does_ match the output of OpenSSL, and
provides a predictable means of decoding the certificate.
This commit is contained in:
Michael Jumper
2023-03-07 16:34:38 -08:00
parent b9958fa331
commit d0574f8d82
5 changed files with 54 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
doc/licenses/bouncycastle-pkix-fips-1.0.7/dep-coordinates.txt Normal file
View File

@@ -0,0 +1 @@
org.bouncycastle:bcpkix-fips:jar:1.0.7