-
-
Notifications
You must be signed in to change notification settings - Fork 9.6k
x509 - add support for updated "distinguished name" format #31406
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
nightio
pushed a commit
to nightio/security-http
that referenced
this issue
May 7, 2019
…509 authentication RFC 2253 (https://tools.ietf.org/html/rfc2253) issue: symfony/symfony#31406
nightio
pushed a commit
to nightio/symfony
that referenced
this issue
May 7, 2019
…509 authentication RFC 2253 (https://tools.ietf.org/html/rfc2253) issue: symfony#31406
nightio
pushed a commit
to nightio/symfony
that referenced
this issue
May 17, 2019
…509 authentication RFC 2253 (https://tools.ietf.org/html/rfc2253) issue: symfony#31406
fabpot
added a commit
that referenced
this issue
Jun 4, 2019
…format in x509 authentication (Robert Kopera) This PR was submitted for the master branch but it was squashed and merged into the 3.4 branch instead (closes #31407). Discussion ---------- [Security] added support for updated "distinguished name" format in x509 authentication RFC 2253 (https://tools.ietf.org/html/rfc2253) issue: #31406 | Q | A | ------------- | --- | Branch? | master | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | #31406 | License | MIT | Doc PR | Commits ------- bdbac2c [Security] added support for updated \"distinguished name\" format in x509 authentication
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description
For example from version 1.11.6 of nginx (http://nginx.org/en/docs/http/ngx_http_ssl_module.html#variables) default format of "distinguished name" uses RFC 2253 (https://tools.ietf.org/html/rfc2253)
k8s nginx ingress uses it as well.
Example
nginx:
$ssl_client_s_dn => emailAddress=developer@example.com,CN=symfony.com
$ssl_client_s_dn_legacy => /emailAddress=developer@example.com/CN=symfony.com
Condition must be modified (add regex):
The text was updated successfully, but these errors were encountered: