Re: [keycloak-dev] User TLS client certificate authentication - inconsistent DN string representation with LDAP

On 1/9/19 10:11 AM, Sebastian Laskawiec wrote: RFC 1779 is obsolete, please do not implement according to deprecated standards. See https://ldap.com/ldap-related-rfcs/ RFC 4514 is the current standard for the string representation of distinguished names. I don't normally code in Java, but I'm sure there are multiple classes in standard jars which already implement DN parsing and comparison. -- John Dennis