Skip to content

client: accept application/pkcs7-mime for csrattrs endpoint#47

Open
kalvdans wants to merge 1 commit into
globalsign:masterfrom
kalvdans:fix-csrattrs-content-type
Open

client: accept application/pkcs7-mime for csrattrs endpoint#47
kalvdans wants to merge 1 commit into
globalsign:masterfrom
kalvdans:fix-csrattrs-content-type

Conversation

@kalvdans
Copy link
Copy Markdown

RFC 7030 Section 4.4 specifies application/pkcs7-mime for the csrattrs response, but the globalsign/est client historically used the non-standard application/csrattrs MIME type. This change makes verifyResponseType accept multiple acceptable content types and updates the CSRAttrs call to accept both MIME types, ensuring interoperability with both RFC-compliant servers and the client's own historic behavior.

Added unit tests for:

  • CSRAttrsRFC7030: accepts application/pkcs7-mime per RFC 7030
  • CSRAttrsNonStandard: accepts application/csrattrs (non-standard)
  • CSRAttrsWrongType: rejects application/pkcs10

AI disclosure: Minimax-M2.7 was used to make the patch.

…or csrattrs endpoint

RFC 7030 Section 4.4 specifies application/pkcs7-mime for the csrattrs
response, but the globalsign/est client historically used the non-standard
application/csrattrs MIME type. This change makes verifyResponseType accept
multiple acceptable content types and updates the CSRAttrs call to accept
both MIME types, ensuring interoperability with both RFC-compliant servers
and the client's own historic behavior.

Added unit tests for:
- CSRAttrsRFC7030: accepts application/pkcs7-mime per RFC 7030
- CSRAttrsNonStandard: accepts application/csrattrs (non-standard)
- CSRAttrsWrongType: rejects application/pkcs10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant