]> git.apps.os.sepia.ceph.com Git - ceph-ci.git/commit
rgw/sts: adding validation of jwks_uri cert according
authorPritha Srivastava <prsrivas@redhat.com>
Thu, 13 Feb 2025 11:18:43 +0000 (16:48 +0530)
committerPritha Srivastava <prsrivas@redhat.com>
Wed, 30 Apr 2025 09:30:33 +0000 (15:00 +0530)
commit8c39f5e397a7067c576f613d5a096f748de7ae4f
tree55c95b3d21f39d94cc742935887d0d2528936097
parent9757eb00f001279f7113ace9b1584bf35d9c0ff5
rgw/sts: adding validation of jwks_uri cert according
to https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_oidc_verify-thumbprint.html
for n&e which can be later used for all key types
(x5c, n&e).

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>
(cherry picked from commit d970f62e3e264644ea474ad4ee513caac977268f)

 Conflicts:
src/rgw/rgw_rest_sts.cc
the conflict was due to validate_signature() taking thumbprints
in place of provider.thumbprints as input param.
src/rgw/rgw_rest_sts.cc
src/rgw/rgw_rest_sts.h