mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2026-05-09 06:56:09 +02:00
Code Issues Projects Releases Wiki Activity
haproxy/reg-tests/jwt
History
Remi Tricot-Le Breton 495eb7b0e0 MINOR: jwe: Disable 'RSA1_5' algorithm by default in jwt_decrypt converters 
In RFC8725, section 3.2, they suggest to "Avoid all RSA-PKCS1 v1.5
encryption algorithms" so this algorithm gets disabled by default.
Tokens having this "alg" won't be decrypted unless it is explicitly
reenabled thanks to 'jwt.decrypt_alg_list' global option.

Thanks to Omkhar Arasaratnam for raising our awareness about this!
2026-05-07 18:00:29 +02:00
..
build_token.py
BUG/MEDIUM: jwt: Properly process ecdsa signatures (concatenated R and S params)
2023-01-18 16:18:31 +01:00
cert.ecdsa.pem
REGTESTS: jwt: Add test with actual certificate passed to jwt_verify
2025-06-30 17:59:55 +02:00
cert.rsa.pem
REGTESTS: jwt: Add test with actual certificate passed to jwt_verify
2025-06-30 17:59:55 +02:00
ec_decrypt.crt
MINOR: jwt: Manage ec certificates in jwt_decrypt_cert
2026-03-10 14:58:47 +01:00
ec_decrypt.key
MINOR: jwt: Manage ec certificates in jwt_decrypt_cert
2026-03-10 14:58:47 +01:00
es256-public.pem
REGTESTS: jwt: Add tests for the jwt_verify converter
2021-10-14 16:38:14 +02:00
es384-public.pem
REGTESTS: jwt: Add tests for the jwt_verify converter
2021-10-14 16:38:14 +02:00
es512-public.pem
REGTESTS: jwt: Add tests for the jwt_verify converter
2021-10-14 16:38:14 +02:00
jws_verify.vtc
REGTESTS: Never reuse server connection in jwt/jws_verify.vtc
2026-04-23 10:56:06 +02:00
jwt_decrypt.vtc
MINOR: jwe: Disable 'RSA1_5' algorithm by default in jwt_decrypt converters
2026-05-07 18:00:29 +02:00
rsa1_5.key
REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests
2026-01-15 10:56:27 +01:00
rsa1_5.pem
REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests
2026-01-15 10:56:27 +01:00
rsa_oeap.key
REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests
2026-01-15 10:56:27 +01:00
rsa_oeap.pem
REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests
2026-01-15 10:56:27 +01:00
rsa-public.pem
REGTESTS: jwt: Add tests for the jwt_verify converter
2021-10-14 16:38:14 +02:00