invalid cert path error while registering WebAuthn authenticator in RH-SSO
Issue
- We are getting below error, when we set
Attestation Conveyance Preferenceto direct
[org.keycloak.authentication.requiredactions.WebAuthnRegister] (executor-thread-48) invalid cert path: com.webauthn4j.validator.exception.CertificateException: invalid cert path
at com.webauthn4j.validator.attestation.trustworthiness.certpath.CertPathTrustworthinessValidatorBase.validate(CertPathTrustworthinessValidatorBase.java:66)
at com.webauthn4j.validator.AttestationValidator.validate(AttestationValidator.java:121)
at com.webauthn4j.validator.RegistrationDataValidator.validate(RegistrationDataValidator.java:192)
at com.webauthn4j.WebAuthnRegistrationManager.validate(WebAuthnRegistrationManager.java:209)
at org.keycloak.authentication.requiredactions.WebAuthnRegister.processAction(WebAuthnRegister.java:233)
at org.keycloak.services.resources.LoginActionsService.processRequireAction(LoginActionsService.java:1106)
Environment
- Red Hat Single Sign-On (RH-SSO)
- 7.6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.