8 Commits

Author	SHA1	Message	Date
Michael Jumper	6424b063f2	GUACAMOLE-839: Correct WildcardURIGuacamoleProperty to correctly handle missing (null) properties.	2023-03-08 09:34:26 -08:00
Michael Jumper	82073a5976	GUACAMOLE-839: Correct typo in JavaDoc of decode() - "valid", not "value".	2023-03-07 16:38:51 -08:00
Michael Jumper	9f8bb71b0e	GUACAMOLE-839: Correct JavaDoc for parameters of getUsername().	2023-03-07 16:37:00 -08:00
Michael Jumper	d0574f8d82	GUACAMOLE-839: Use BouncyCastle for retrieval of certificate details. ... Java's build-in support for reading X.509 certificates does not deal well with PIV certificates containing the username as a "serialNumber" attribute. Rather than exposing the string value of that attribute, the Java implementation exposes a byte array that does not fully match the string value shown by a tool like OpenSSL. BouncyCastle, on the other hand, _does_ match the output of OpenSSL, and provides a predictable means of decoding the certificate.	2023-03-07 16:36:37 -08:00
Michael Jumper	0b5b82cc48	GUACAMOLE-839: Allow accepted subject DNs to be restricted via configuration.	2023-03-01 09:10:53 -08:00
Michael Jumper	8255326512	GUACAMOLE-839: Move SSL/TLS client auth logic to separate service.	2023-03-01 09:10:53 -08:00
Michael Jumper	38f1360dec	GUACAMOLE-839: Ensure SSL/TLS client auth failures are reflected in the Guacamole UI.	2023-03-01 09:10:53 -08:00
Michael Jumper	e2a6947ff6	GUACAMOLE-839: Implement base support for SSO using SSL/TLS authentication (certificates / smart cards).	2023-03-01 09:10:52 -08:00