Skip to content

Commit 4a0b429

Browse files
committed
Set setPolicyQualifiersRejected to false for testing
The default Java certificate path validator rejects certificates with critical policy extensions, and Windows Hello uses such an attestation cert. The solution for this is to set the `setPolicyQualifiersRejected(boolean)` setting and for the application to validate the policy tree. For now, we'll just set the parameter to `false` and add a validator setting later.
1 parent 24a7bbd commit 4a0b429

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

webauthn-server-core/src/main/java/com/yubico/webauthn/FinishRegistrationSteps.java

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -535,6 +535,8 @@ public boolean attestationTrusted() {
535535
.collect(Collectors.toSet()));
536536
pathParams.setDate(Date.from(clock.instant()));
537537
pathParams.setRevocationEnabled(trustRoots.get().isEnableRevocationChecking());
538+
pathParams.setPolicyQualifiersRejected(
539+
false); // TODO: Add parameter to configure policy qualifier processor
538540
trustRoots.get().getCertStore().ifPresent(pathParams::addCertStore);
539541
cpv.validate(certPath, pathParams);
540542
return true;

0 commit comments

Comments
 (0)