[jboss-jira] [JBoss JIRA] (WFCORE-3349) CLIENT_CERT without users certificates database
[
https://issues.jboss.org/browse/WFCORE-3349?page=com.atlassian.jira.plugi...
]
Jan Kalina moved WFLY-9151 to WFCORE-3349:
------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-3349 (was: WFLY-9151)
Component/s: Security
(was: Security)
Affects Version/s: 3.0.4.Final
(was: 11.0.0.Alpha1)
Fix Version/s: (was: 12.0.0.Alpha1)
CLIENT_CERT without users certificates database
-----------------------------------------------
Key: WFCORE-3349
URL: https://issues.jboss.org/browse/WFCORE-3349
Project: WildFly Core
Issue Type: Feature Request
Components: Security
Affects Versions: 3.0.4.Final
Reporter: Jan Kalina
Assignee: Jan Kalina
CLIENT_CERT http-authentication-mechanism currently requires to provide security-realm,
which will contain identity for given certificate and will verify X509Evidence for it.
This does not provide replacement for legacy truststore auth, which allows to use only CA
certificate to authenticate users by certificates signed by CA, without any database of
them.
Analysis document:
https://developer.jboss.org/wiki/AnalysisDesign-CLIENTCERTWithoutUsersCer...
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)