You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Sandeep More (Jira)" <ji...@apache.org> on 2026/09/30 11:33:00 UTC

[jira] [Created] (KNOX-3498) OIDC issuer discovery url with IP breaks when FIPS enabled.

Sandeep More created KNOX-3498:
----------------------------------

             Summary: OIDC issuer discovery url with IP breaks when FIPS enabled.
                 Key: KNOX-3498
                 URL: https://issues.apache.org/jira/browse/KNOX-3498
             Project: Apache Knox
          Issue Type: Bug
          Components: Server
            Reporter: Sandeep More
            Assignee: Sandeep More


A trusted OIDC issuer whose discovery url has IP (used in`jwks_uri`) breaks with BouncyCastle FIPS, the failure looks like a missing CA which is misleading. 

 

For KnoxIDF, registering a trusted OIDC issuer whose discovery document advertises `jwks_uri` as an IP makes token exchange fail, and the reported
error is looks similar to trust-store misconfiguration. Example is in k8s
: kube-apiserver advertises an IP by default, e.g.

    "jwks_uri": "https://10.83.4.208:6443/openid/v1/jwks"



--
This message was sent by Atlassian Jira
(v8.20.10#820010)