Alberto Bertogli f63e5bf0b2 sts: Reject policies with max_age > 1y, as per RFC ...

The MTA-STS standard explicitly says the maximum max_age is 1 year.

This patch adds a check to the STS library to enforce this. Policies
with max_age > 1y will be treated as invalid.

See this email thread for some discussion on the topic:
https://mailarchive.ietf.org/arch/msg/uta/bnUjy9jxM_Va-lDXVtbB32zIkYI

2019-08-31 01:14:56 +01:00

13 KiB

Raw Blame History

View Raw