gaurav singh created IMPALA-13288:
-------------------------------------
Summary: CLONE - Support x5c Parameter in JSON Web Keys (JWK)
Key: IMPALA-13288
URL: https://issues.apache.org/jira/browse/IMPALA-13288
Project: IMPALA
Issue Type: Bug
Components: Backend, Security
Reporter: gaurav singh
Assignee: gaurav singh
Fix For: Impala 4.5.0
The ["x5u"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.6],
["x5c"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.7],
["x5t"|https://datatracker.ietf.org/doc/html/rfc7517#section-4.8], and
["x5t#S256|https://datatracker.ietf.org/doc/html/rfc7517#section-4.9]
parameters in JWKs is not supported by Impala. Implement support for this
parameter using the available methods in the [Thalhammer/jwt-cpp
library|https://github.com/Thalhammer/jwt-cpp/blob/ce1f9df3a9f861d136d6f0c93a6f811c364d1d3d/example/jwks-verify.cpp].
Note: If the "alg" property is specified and so is "x5u" or "x5c", then the
value of the "alg" property must match the algorithm on the certificate from
the "x5u" or "x5c" property.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
