<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">
<div>Hi everyone,</div>
<div> </div>
Duo has recently updated the root CA bundle included with their Web SDK v4. These "pinned” root certificates are used to evaluate the chain of trust associated with the end-entity certificate presented by the Duo API. Note that the plugin does not (has never)
use the default set of certificates provided by the JDK. We plan to include the same set of updated certificates in both variants of the DuoOIDC plugin starting from version 2.2.0.
<div><br>
</div>
<div>Testing the updated CA bundle can be challenging because it depends on the API host configured for your client or integration. Since we don't have access to all the hosts for testing, we would like to ask if anyone would be willing to install the current
snapshot of either DuoOIDC plugin variant (as they use the same set of certificates) in a development environment and test their integration. If you could do that and share the results, we would greatly appreciate it. </div>
<div><br>
</div>
<div>You can find the instructions for installing a snapshot on the Plugin Testing Wiki page [1]. Specifically, you’d need to install version 2.2.0-SNAPSHOT of either the 'Duo Plugin (Nimbus)' or the 'Duo Plugin (Duo SDK)', as indicated on the project status
site linked in the plugin testing page.</div>
<div><br>
</div>
<div>This is also a heads-up that these certificates are being updated. </div>
<div><br>
</div>
<div>Phil</div>
<div><br>
</div>
<div>[1] <a href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3256057857/Plugin+Testing">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3256057857/Plugin+Testing</a></div>
<mc type="body"><font size="1"><font face="Corbel"><br>
<p>Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered
office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice</p>
</font></font>
</body>
</html>