-
Notifications
You must be signed in to change notification settings - Fork 326
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
added x509 documentation #5094
base: master
Are you sure you want to change the base?
added x509 documentation #5094
Conversation
|
||
1. Create the keystore that includes the private key by executing the following command: | ||
!!! tip "Got the 'permission denied' error?" | ||
If you get a permission denied error, run this command as an administrator to resolve the issue. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Need to add the shell command for the tip
|
||
2. Set the following properties under `x509\_extensions`. | ||
``` text |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Instead shall we use a table or a list here? WDYT?
keytool -import -keystore cacerts.jks -storepass cacertspassword -alias rootCA -file rootCA.crt -noprompt | ||
keytool -importcert -alias localcrt -file localcrt.crt -keystore cacerts.jks -storepass cacertspassword -noprompt | ||
``` | ||
```shell |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Shall we break this into two steps? It would make it easy to copy paste the command directly from the doc.
WDYT?
@@ -261,11 +293,11 @@ If {{product_name}} is already started, use the [Certificate Validation Manageme | |||
|
|||
{% endif %} | |||
|
|||
## Configure the Authentication Endpoint | |||
## Step 5: Configure the Authentication Endpoint |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
AFAIR step 5 is optional. Shall we mention that in the documentation?
|
||
## Add a claim mapping for the certificate | ||
## Step 6: Add an attribute mapping for the certificate |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Step 6 is only required when the user has enabled storing X.509 certificates as a user attribute
Co-authored-by: Thamindu Dilshan Jayawickrama <[email protected]>
Co-authored-by: Thamindu Dilshan Jayawickrama <[email protected]>
Co-authored-by: Thamindu Dilshan Jayawickrama <[email protected]>
Co-authored-by: Thamindu Dilshan Jayawickrama <[email protected]>
Co-authored-by: Thamindu Dilshan Jayawickrama <[email protected]>
Purpose
Related issue: wso2/product-is#22066