Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Https client smart card #795

Draft
wants to merge 10 commits into
base: master
Choose a base branch
from
Draft

Https client smart card #795

wants to merge 10 commits into from

Commits on Dec 15, 2020

  1. Better HTTPS with Client Authentication & SmartCard support on Windows

    a. Better HTTPS with Client authentication :
     - In order to avoid too many PIN/Password requests (HTTPS hanshakes), downloads first the initial jar (mono-thread) then all remaining ones (multi-thread)
     - In case of initial jar download failure (Client Certificate Selection cancel, incorrect PIN/Password, ...), fail fast and do not try to download remaining jars
     - No resource prefetch, otherwise deployment.cache.parallelDownloadCount is not enforced
    
     b. New Security Dialog UI for Client Certificate Selection :
     - Ability to display details on each certificate
     - Shown in TaskBar
     - Cancellable
     - Selection using double-click, Enter key or OK button
     - Internationalization
    
     c. SmartCard support on Windows
     - Introduction of a Merged Key Manager for user, system and browser key stores
     - Client alias selection using a preference algorithm :
     a) Get all non-expired aliases with extension ClientCert (1.3.6.1.5.5.7.3.2) or ANY (2.5.29.37.0)
     if only one, it is selected, if more than one, a UI helps to select one of them.
     b) Otherwise, get all expired aliases with extension ClientCert (1.3.6.1.5.5.7.3.2) or ANY (2.5.29.37.0)
     if only one, it is selected, if more than one, a UI helps to select one of them.
     c) Otherwise, get all remaining aliases
     if only one, it is selected, if more than one, a UI helps to select one of them.
     - UI will display the suffix " (from user keystore)" or " (from system keystore)" or " (from browser keystore)"
     - If user cancels the Client Certificate UI, it is remembered for next chooseClientAlias call
     - Client alias selection is cached per remote host
    DavidTavoularis committed Dec 15, 2020
    Configuration menu
    Copy the full SHA
    7c527f5 View commit details
    Browse the repository at this point in the history

Commits on Apr 21, 2021

  1. Merge pull request #729 from DavidTavoularis/https-client-smart-card

    Better HTTPS with Client Authentication & SmartCard support on Windows
    sclassen authored Apr 21, 2021
    Configuration menu
    Copy the full SHA
    fb5ab7d View commit details
    Browse the repository at this point in the history
  2. code formatting

    sclassen committed Apr 21, 2021
    Configuration menu
    Copy the full SHA
    6b96e26 View commit details
    Browse the repository at this point in the history
  3. code formatting

    sclassen committed Apr 21, 2021
    Configuration menu
    Copy the full SHA
    7a27447 View commit details
    Browse the repository at this point in the history
  4. code formatting

    sclassen committed Apr 21, 2021
    Configuration menu
    Copy the full SHA
    d3aec2c View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    cb69084 View commit details
    Browse the repository at this point in the history
  6. code formatting

    sclassen committed Apr 21, 2021
    Configuration menu
    Copy the full SHA
    c1b6f68 View commit details
    Browse the repository at this point in the history
  7. code formatting

    sclassen committed Apr 21, 2021
    Configuration menu
    Copy the full SHA
    d202321 View commit details
    Browse the repository at this point in the history
  8. code cleanup

    sclassen committed Apr 21, 2021
    Configuration menu
    Copy the full SHA
    4114a38 View commit details
    Browse the repository at this point in the history
  9. Configuration menu
    Copy the full SHA
    ceb570a View commit details
    Browse the repository at this point in the history