Sandeep More created KNOX-3498:
----------------------------------
Summary: OIDC issuer discovery url with IP breaks when FIPS
enabled.
Key: KNOX-3498
URL: https://issues.apache.org/jira/browse/KNOX-3498
Project: Apache Knox
Issue Type: Bug
Components: Server
Reporter: Sandeep More
Assignee: Sandeep More
A trusted OIDC issuer whose discovery url has IP (used in`jwks_uri`) breaks
with BouncyCastle FIPS, the failure looks like a missing CA which is
misleading.
For KnoxIDF, registering a trusted OIDC issuer whose discovery document
advertises `jwks_uri` as an IP makes token exchange fail, and the reported
error is looks similar to trust-store misconfiguration. Example is in k8s
: kube-apiserver advertises an IP by default, e.g.
"jwks_uri": "https://10.83.4.208:6443/openid/v1/jwks";
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
