Remi Tricot-Le Breton 495eb7b0e0 MINOR: jwe: Disable 'RSA1_5' algorithm by default in jwt_decrypt converters ... In RFC8725, section 3.2, they suggest to "Avoid all RSA-PKCS1 v1.5 encryption algorithms" so this algorithm gets disabled by default. Tokens having this "alg" won't be decrypted unless it is explicitly reenabled thanks to 'jwt.decrypt_alg_list' global option. Thanks to Omkhar Arasaratnam for raising our awareness about this!		2026-05-07 18:00:29 +02:00
..
build_token.py	BUG/MEDIUM: jwt: Properly process ecdsa signatures (concatenated R and S params)	2023-01-18 16:18:31 +01:00
cert.ecdsa.pem	REGTESTS: jwt: Add test with actual certificate passed to jwt_verify	2025-06-30 17:59:55 +02:00
cert.rsa.pem	REGTESTS: jwt: Add test with actual certificate passed to jwt_verify	2025-06-30 17:59:55 +02:00
ec_decrypt.crt	MINOR: jwt: Manage ec certificates in jwt_decrypt_cert	2026-03-10 14:58:47 +01:00
ec_decrypt.key	MINOR: jwt: Manage ec certificates in jwt_decrypt_cert	2026-03-10 14:58:47 +01:00
es256-public.pem	REGTESTS: jwt: Add tests for the jwt_verify converter	2021-10-14 16:38:14 +02:00
es384-public.pem	REGTESTS: jwt: Add tests for the jwt_verify converter	2021-10-14 16:38:14 +02:00
es512-public.pem	REGTESTS: jwt: Add tests for the jwt_verify converter	2021-10-14 16:38:14 +02:00
jws_verify.vtc	REGTESTS: Never reuse server connection in jwt/jws_verify.vtc	2026-04-23 10:56:06 +02:00
jwt_decrypt.vtc	MINOR: jwe: Disable 'RSA1_5' algorithm by default in jwt_decrypt converters	2026-05-07 18:00:29 +02:00
rsa-public.pem	REGTESTS: jwt: Add tests for the jwt_verify converter	2021-10-14 16:38:14 +02:00
rsa1_5.key	REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests	2026-01-15 10:56:27 +01:00
rsa1_5.pem	REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests	2026-01-15 10:56:27 +01:00
rsa_oeap.key	REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests	2026-01-15 10:56:27 +01:00
rsa_oeap.pem	REGTESTS: jwe: Add jwt_decrypt_secret and jwt_decrypt_cert tests	2026-01-15 10:56:27 +01:00