Bugzilla – Bug 6388
CAS assertions don't work with GSI C
Last modified: 2008-11-13 15:28:47
You need to
before you can comment on or make changes to this bug.
The GAA callout code in GT 4.2 doesn't work with CAS assertions generated by
the 4.2 CAS server.
The CAS server in 4.2 uses DER-encoded assertions using the OID
220.127.116.11.4.1.3518.104.22.168.12, but the callout expects non-DER encoded assertions
using the OID 22.214.171.124.4.1.35126.96.36.199.9.
It appears the new format was introduced in the 4.0.x cycle, with an option to
the 4.0.x cas-proxy-init to use the new format, so this bug can probably be hit
with 4.0 installations as well.
Fixed callouts to handle both oids correctly. Fixes committed to trunk,
globus_4_0_branch and globus_4_2_branch.