Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

added x509 documentation #5094

Open
wants to merge 7 commits into
base: master
Choose a base branch
from

Conversation

himeshsiriwardana
Copy link
Contributor

@himeshsiriwardana himeshsiriwardana commented Feb 22, 2025

Purpose

Related issue: wso2/product-is#22066

screencapture-localhost-8000-en-next-guides-authentication-mfa-add-x509-login-2025-02-22-09_58_03


1. Create the keystore that includes the private key by executing the following command:
!!! tip "Got the 'permission denied' error?"
If you get a permission denied error, run this command as an administrator to resolve the issue.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Need to add the shell command for the tip


2. Set the following properties under `x509\_extensions`.
``` text
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Instead shall we use a table or a list here? WDYT?

keytool -import -keystore cacerts.jks -storepass cacertspassword -alias rootCA -file rootCA.crt -noprompt
keytool -importcert -alias localcrt -file localcrt.crt -keystore cacerts.jks -storepass cacertspassword -noprompt
```
```shell
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shall we break this into two steps? It would make it easy to copy paste the command directly from the doc.
WDYT?

@@ -261,11 +293,11 @@ If {{product_name}} is already started, use the [Certificate Validation Manageme

{% endif %}

## Configure the Authentication Endpoint
## Step 5: Configure the Authentication Endpoint
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AFAIR step 5 is optional. Shall we mention that in the documentation?


## Add a claim mapping for the certificate
## Step 6: Add an attribute mapping for the certificate
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Step 6 is only required when the user has enabled storing X.509 certificates as a user attribute

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants