| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| 4.86.1 source code.tar.gz | 2026-07-15 | 2.7 MB | |
| 4.86.1 source code.zip | 2026-07-15 | 3.7 MB | |
| README.md | 2026-07-15 | 992 Bytes | |
| Totals: 3 Items | 6.4 MB | 2 | |
Bug Fixes
- Fixed the mTLS Proof-of-Possession token cache to key on the certificate's full DER (
x5t#S256) instead of only the public key, preventing a stale token (andAADSTS500181) after a same-key certificate renewal. #6123 - Fell back to RS256 when a certificate's PSS signing operation is rejected by
RSACryptoServiceProvider, rebuilding the client assertion so authentication can proceed. #6126 - Detect and reject symbolic links in the Unix cache-file write path (lstat pre-check plus
O_NOFOLLOW), closing a TOCTOU window. #6115 - Corrected misleading "region required" error messages and doc comments in the mTLS PoP flow. #6127