OpenID Connect - Key and certificate rollover
- Aleksandar Laban
IMPORTANT INFORMATION
Start date and time | 2024-01-16 09:00 |
End date and time | 2024-01-16 10:00 |
Impact | OpenID Connect authentication and authorization |
Description | We inform about a planned renewal of the OpenID Connect signing and encryption key in Freja eIDProduction system whereafter the old key and certificate cannot be used anymore. |
Action | If you use Freja OpenID Connect, we suggest that your verify that your implementation can handle multiple keys identifying them with the kid value. Read more about it at https://openid.net/specs/openid-connect-core-1_0.html#RotateSigKeys |
The certificates will be changed in our TEST environment at 2023-12-14 09:00-10:00 whereafter you can verify your implementation against our test system.
The key id:s are listed in the table below and is also included in jwks_uri in https://oidc-ct.test.frejaeid.com/oidc/.well-known/openid-configuration, i.e. https://oidc-ct.test.frejaeid.com/oidc/jwk
OpenID Connect certificates in Test | |||
x5t#S256 | kid | Not Before | Expires |
252yml-uEE_EEVNJwIFVMW8t9WXg3-SUUJTpyp5ogt8 | oidc_encryption_ct | 2021-01-18 11:13:16 | 2024-01-18 11:13:16 |
ZLWMCjGpGwbZgchn9oP_WEW0GOopPiLksL-2XDSie2A | oidc_signing_ct | 2021-01-18 11:04:55 | 2024-01-18 11:04:55 |
LR8FjH-ZcULn5IvFh1aOinHCPdK6jTTn9e3ZvMXleYg | oidc_encryption_ct_v3 | 2023-12-11 14:25:12 | 2026-12-11 14:25:12 |
Yffbldf_pXMRJJHB14dEBvkC6xQRw02NdVo6C5D-lNQ | oidc_signing_ct_v3 | 2023-12-11 14:24:39 | 2026-12-11 14:24:39 |
OpenID Connect certificates in Production | |||
x5t#S256 | kid | Not Before | Expires |
9eDazpKswNfbm0-Wz3uP1qepvGPB3xBUMgqHbTf_dwc | oidc_encryption_production | 2021-01-18 11:28:33 | 2024-01-18 11:28:33 |
ZLWMCjGpGwbZgchn9oP_WEW0GOopPiLksL-2XDSie2A | oidc_signing_production | 2021-01-18 11:28:09 | 2024-01-18 11:28:09 |
9Ysq_LA3YZJUYTOEQkueCK75re32-Qh_-VZq5goJ5XY | oidc_encryption_prod_v3 | 2023-12-12 16:10:29 | 2026-12-12 16:10:29 |
PqnYD8B-7GZOvgD1qqPMd2qK7J8ULLOlOv4shgAnYHY | oidc_signing_prod_v3 | 2023-12-12 16:10:36 | 2026-12-12 16:10:36 |
Please contact Freja eID Partner Support if you have any questions related to this matter:
partnersupport@frejaeid.com | status.frejaeid.info