Mike Jumper
ed31d6f2e0
GUACAMOLE-839: Force usage of non-dynamic version of Bouncy Castle FIPS.
2023-10-06 12:17:15 -07:00
Mike Jumper
e46d06e6b8
GUACAMOLE-1780: Merge changes adding MFA compatibility to SSO support.
2023-07-06 08:27:31 -07:00
James Muehlner
e804e8f95d
GUACAMOLE-1829: Correct versions of dependencies for remaining 1.5.2 versioned extensions.
2023-07-05 23:28:34 +00:00
James Muehlner
97f93fa5c5
GUACAMOLE-1780: Unify session reactivation/invalidation behavior.
2023-06-30 15:35:31 +00:00
James Muehlner
0de694c912
GUACAMOLE-1780: Allow SAML, SSL sessions to be resumed after another auth provider vetoes the auth attempt.
2023-06-27 23:28:09 +00:00
Mike Jumper
54cea4e80b
GUACAMOLE-1790: Bump version numbers of components not within 1.5.2.
2023-05-17 17:00:46 -07:00
Mike Jumper
520edb32ee
GUACAMOLE-1767: Correct parent project version (bumped to 1.5.1).
2023-04-10 09:12:56 -07:00
Michael Jumper
08e5938493
GUACAMOLE-839: Redirect user to proper URI for SSL/TLS client auth (rather than just refuse).
2023-03-28 13:36:15 -07:00
Michael Jumper
e6449d2c57
GUACAMOLE-1757: Ensure SSO provider list is added to login UI only once.
2023-03-23 12:30:58 -07:00
Michael Jumper
f98901f933
GUACAMOLE-839: Add sanity checks around parsed PEM data, which may indeed be null.
2023-03-08 09:34:52 -08:00
Michael Jumper
6424b063f2
GUACAMOLE-839: Correct WildcardURIGuacamoleProperty to correctly handle missing (null) properties.
2023-03-08 09:34:26 -08:00
Michael Jumper
82073a5976
GUACAMOLE-839: Correct typo in JavaDoc of decode() - "valid", not "value".
2023-03-07 16:38:51 -08:00
Michael Jumper
9f8bb71b0e
GUACAMOLE-839: Correct JavaDoc for parameters of getUsername().
2023-03-07 16:37:00 -08:00
Michael Jumper
d0574f8d82
GUACAMOLE-839: Use BouncyCastle for retrieval of certificate details.
...
Java's build-in support for reading X.509 certificates does not deal
well with PIV certificates containing the username as a "serialNumber"
attribute. Rather than exposing the string value of that attribute, the
Java implementation exposes a byte array that does not fully match the
string value shown by a tool like OpenSSL.
BouncyCastle, on the other hand, _does_ match the output of OpenSSL, and
provides a predictable means of decoding the certificate.
2023-03-07 16:36:37 -08:00
Michael Jumper
0b5b82cc48
GUACAMOLE-839: Allow accepted subject DNs to be restricted via configuration.
2023-03-01 09:10:53 -08:00
Michael Jumper
8255326512
GUACAMOLE-839: Move SSL/TLS client auth logic to separate service.
2023-03-01 09:10:53 -08:00
Michael Jumper
38f1360dec
GUACAMOLE-839: Ensure SSL/TLS client auth failures are reflected in the Guacamole UI.
2023-03-01 09:10:53 -08:00
Michael Jumper
e2a6947ff6
GUACAMOLE-839: Implement base support for SSO using SSL/TLS authentication (certificates / smart cards).
2023-03-01 09:10:52 -08:00
