Add intermediate certificates to auth token model#69

Open

aarmam wants to merge 18 commits into

web-eid-mobilefrom

Commits on Jun 16, 2026

NFC-169 Fix PHP auth cert chain, format, SSRF, cookie and OCSP checks
Sander Kondratjev
committed
NFC-169 composer lock
Sander Kondratjev
committed

Commits on Jun 26, 2026

NFC-169 Review findings
Sander Kondratjev
committed

Commits on Jul 3, 2026

NFC-169 Versioning improvement
Sander Kondratjev
committed

Commits on Jul 6, 2026

NFC-128 Handle missing token format as parse error
aarmam
committed
NFC-128 Increase maximum allowed token size limit
aarmam
committed
NFC-128 Preserve the cause when certificate decoding fails
aarmam
committed
NFC-128 Add intermediate certificates to auth token model
aarmam
committed
NFC-128 Build certification paths with token-supplied intermediate certificates
aarmam
committed
NFC-128 Add revocation checking for token-supplied intermediate CA certificates
aarmam
committed
NFC-128 Authorize AIA OCSP responders against the subject certificate issuer
aarmam
committed
NFC-128 Require the OCSP-signing extended key usage only for delegated responder certificates
aarmam
committed
NFC-128 Implement OCSP and CRL revocation checking for intermediate CA certificates
aarmam
committed
NFC-128 Validate authentication certificate chains with token-supplied intermediates
aarmam
committed
NFC-128 Validate signing certificate chains with token-supplied intermediates
aarmam
committed
NFC-128 Document intermediate certificate token fields
aarmam
committed
NFC-128 Add OCSP tests for Belgian and Finnish test cards
aarmam
committed
NFC-128 Make AIA OCSP issuer matching configurable
aarmam
committed