OpenID Connect - Key and certificate rollover

IMPORTANT INFORMATION

Start date and time 

2024-01-16 09:00

End date and time  

2024-01-16 10:00

 

Impact

OpenID Connect authentication and authorization

Description

We inform about a planned renewal of the OpenID Connect signing and encryption key in Freja eIDProduction system whereafter the old key and certificate cannot be used anymore.

Action        

If you use Freja OpenID Connect, we suggest that your verify that your implementation can handle multiple keys identifying them with the kid value. Read more about it at https://openid.net/specs/openid-connect-core-1_0.html#RotateSigKeys

The certificates will be changed in our TEST environment at 2023-12-14  09:00-10:00 whereafter you can verify your implementation against our test system.

The key id:s are listed in the table below and is also included in jwks_uri in https://oidc-ct.test.frejaeid.com/oidc/.well-known/openid-configuration, i.e. https://oidc-ct.test.frejaeid.com/oidc/jwk 

OpenID Connect certificates in Test

x5t#S256

kid

Not Before

Expires

252yml-uEE_EEVNJwIFVMW8t9WXg3-SUUJTpyp5ogt8

oidc_encryption_ct

2021-01-18 11:13:16

2024-01-18 11:13:16

ZLWMCjGpGwbZgchn9oP_WEW0GOopPiLksL-2XDSie2A

oidc_signing_ct

2021-01-18 11:04:55

2024-01-18 11:04:55

LR8FjH-ZcULn5IvFh1aOinHCPdK6jTTn9e3ZvMXleYg

oidc_encryption_ct_v3

2023-12-11 14:25:12

2026-12-11 14:25:12

Yffbldf_pXMRJJHB14dEBvkC6xQRw02NdVo6C5D-lNQ

oidc_signing_ct_v3

2023-12-11 14:24:39

2026-12-11 14:24:39

 

OpenID Connect certificates in Production

x5t#S256

kid

Not Before

Expires

9eDazpKswNfbm0-Wz3uP1qepvGPB3xBUMgqHbTf_dwc

oidc_encryption_production

2021-01-18 11:28:33

2024-01-18 11:28:33

ZLWMCjGpGwbZgchn9oP_WEW0GOopPiLksL-2XDSie2A

oidc_signing_production

2021-01-18 11:28:09

2024-01-18 11:28:09

9Ysq_LA3YZJUYTOEQkueCK75re32-Qh_-VZq5goJ5XY

oidc_encryption_prod_v3

2023-12-12 16:10:29

2026-12-12 16:10:29

PqnYD8B-7GZOvgD1qqPMd2qK7J8ULLOlOv4shgAnYHY

oidc_signing_prod_v3

2023-12-12 16:10:36

2026-12-12 16:10:36

Please contact Freja eID Partner Support if you have any questions related to this matter: 
partnersupport@frejaeid.com | status.frejaeid.info