Skip to content

Commit

Permalink
Remove documentation of com.sun.security.enableCRLDP setting
Browse files Browse the repository at this point in the history
  • Loading branch information
emlun committed Dec 12, 2024
1 parent 25ccfc2 commit 4adf4ca
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 14 deletions.
11 changes: 0 additions & 11 deletions webauthn-server-attestation/README.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -222,17 +222,6 @@ RegistrationResult result = rp.finishRegistration(/* ... */);
Set<MetadataBLOBPayloadEntry> metadata = mds.findEntries(result);
----------

5. If you use the SUN provider for the `PKIX` certificate path validation algorithm, which many deployments do by default:
set the `com.sun.security.enableCRLDP` system property to `true`.
This is required for the SUN `PKIX` provider to support the CRL Distribution Points extension,
which is needed in order to verify the BLOB signature.
+
For example, this can be done on the JVM command line using a `-Dcom.sun.security.enableCRLDP=true` option.
See the https://docs.oracle.com/javase/9/security/java-pki-programmers-guide.htm#GUID-EB250086-0AC1-4D60-AE2A-FC7461374746__SECTION-139-623E860E[Java PKI Programmers Guide]
for details.
+
This step may not be necessary if you use a different provider for the `PKIX` certificate path validation algorithm.


== Selecting trusted authenticators

Expand Down
3 changes: 0 additions & 3 deletions webauthn-server-demo/build.gradle.kts
Original file line number Diff line number Diff line change
Expand Up @@ -55,9 +55,6 @@ dependencies {

application {
mainClass.set("demo.webauthn.EmbeddedServer")

// Required for processing CRL distribution points extension
applicationDefaultJvmArgs = listOf("-Dcom.sun.security.enableCRLDP=true")
}

for (task in listOf(tasks.installDist, tasks.distZip, tasks.distTar)) {
Expand Down

0 comments on commit 4adf4ca

Please sign in to comment.