Pebble didn't have badSignatureAlgorithm error, while RFC8555 section 6.2 mandates it. jws parse time check for bad algorithm is needed because same as jose.parsesigned refuese to parse without algolist(which is good thing) so error already thrown at that time and we need to catch this type of error there. see related boulder PR https://github.com/letsencrypt/boulder/pull/8091 --------- Co-authored-by: Aaron Gable <aaron@aarongable.com> |
||
|---|---|---|
| .. | ||
| common.go | ||
| problems.go | ||