package: moonshot-gss-eap
version: 0.9.2-3
severity: serious
justification: Broken interoperability with the UK's production Moonshot
infrastructure.

It turns out that despite code designed specifically to permit internal
white space in CA certificates in moonshot trust anchors, the length
check in util_moonshot.c will reject a CA certificate whose base64
encoding includes whitespace.

Unfortunately, JISC Assent, the production Moonshot infrastructure in
the UK, includes internal space in the cross-organizational certificates
it generates.

So, using this version of the software, you cannot interact with those
credentials.


--Sam


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to