Bradley Bennett created GUACAMOLE-2240:
------------------------------------------
Summary: SAML SSO metadata parsing fails when X509Certificate
contains multiline Base64 certificate data
Key: GUACAMOLE-2240
URL: https://issues.apache.org/jira/browse/GUACAMOLE-2240
Project: Guacamole
Issue Type: Bug
Components: guacamole-auth-sso-saml
Affects Versions: 1.6.0, 1.6.1
Reporter: Bradley Bennett
In SAML-based SSO, identity signing certificates are published in metadata
using the {{X509Certificate}} element, which contains Base64-encoded
certificate data that may include whitespace or line breaks. Guacamole fails to
parse valid SAML metadata when the {{X509Certificate}} value is formatted
across multiple lines.
{code:java}
<X509Certificate>
ABCDEF1234567890
ABCDEF1234567890
ABCDEF1234567890
</X509Certificate> {code}
Flattening the certificate data to a single line allows the metadata to be
parsed successfully.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
