@@ -533,16 +533,17 @@ RUN if [ "$ENABLE_OPENID" = "True" ]; then \
533533 fi;
534534
535535
536- # Upgrade mod_auth_openidc from upstream github packages if requested - mainly needed for rhel/centos7
537- # https://stackoverflow.com/questions/68742362/how-to-install-mod-auth-openidc-on-rhel-7
536+ # Upgrade mod_auth_openidc from upstream github packages if requested - mainly
537+ # needed for most recent security fixes.
538538# The module requires a recent cjose library version. Packaged versions are
539539# also available on the upstream releases page under the 2.4.0 release Assets.
540- # Version 2.4.12.1+ is needed to support the OIDCPassClaimsAs encoding setting in apache conf
540+ # Version 2.4.12.1+ is needed to support the OIDCPassClaimsAs encoding setting
541+ # in apache conf.
541542RUN echo "UPGRADE_MOD_AUTH_OPENIDC: $UPGRADE_MOD_AUTH_OPENIDC"
542543RUN if [ "$UPGRADE_MOD_AUTH_OPENIDC" = "True" ]; then \
543544 if [ -z "${UPGRADE_OIDC_AUTH_MOD_SRC}" ]; then \
544545 echo "upgrading mod_auth_openidc from upstream release package"; \
545- UPGRADE_OIDC_AUTH_MOD_SRC="https://github.com/OpenIDC/mod_auth_openidc/releases/download/v2.4.19.3 /mod_auth_openidc-2.4.19.3 -1.el9.x86_64.rpm"; \
546+ UPGRADE_OIDC_AUTH_MOD_SRC="https://github.com/OpenIDC/mod_auth_openidc/releases/download/v2.4.19.4 /mod_auth_openidc-2.4.19.4 -1.el9.x86_64.rpm"; \
546547 else \
547548 echo "upgrading mod_auth_openidc from ${UPGRADE_OIDC_AUTH_MOD_SRC}"; \
548549 fi; \
@@ -551,7 +552,7 @@ RUN if [ "$UPGRADE_MOD_AUTH_OPENIDC" = "True" ]; then \
551552 #echo "installing cjose dependency from OS package"; \
552553 #UPGRADE_OIDC_CJOSE_SRC="cjose"; \
553554 echo "upgrading cjose from upstream release package"; \
554- UPGRADE_OIDC_CJOSE_SRC="https://github.com/OpenIDC/cjose/releases/download/v0.6.2.4 /cjose-0.6.2.4-2 .el9.x86_64.rpm"; \
555+ UPGRADE_OIDC_CJOSE_SRC="https://github.com/OpenIDC/cjose/releases/download/v0.6.2.7 /cjose-0.6.2.7-1 .el9.x86_64.rpm"; \
555556 else \
556557 echo "upgrading cjose from ${UPGRADE_OIDC_CJOSE_SRC}"; \
557558 fi; \
0 commit comments