[keycloak-dev] User TLS client certificate authentication - inconsistent DN string representation with LDAP

[John Dennis]

On 1/9/19 10:11 AM, Sebastian Laskawiec wrote:
> RFC 1779 (A String Representation of Distinguished Names) also mentions 

RFC 1779 is obsolete, please do not implement according to deprecated 
standards. See https://ldap.com/ldap-related-rfcs/

RFC 4514 is the current standard for the string representation of 
distinguished names.

I don't normally code in Java, but I'm sure there are multiple classes 
in standard jars which already implement DN parsing and comparison.

-- 
John Dennis