Updated documentation for load balancer request headers. (#88)

eu-federation-gateway-service · Sep 2, 2020 · 1c0197b · 1c0197b
1 parent b0fe355
commit 1c0197b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/docs/software-design-federation-gateway-service.md b/docs/software-design-federation-gateway-service.md
@@ -263,8 +263,8 @@ As shown in the figure below, the Federation Gateway (FG) Load Balancer authenti
 
 | HTTP Header         | Description |
 |---------------------|-------------|
-| X-SSL-Client-SHA256 |	SHA-256 hash value of the DER encoded client's certificate. The so-called certificate fingerprint or thumbprint. (hex, lowercase, without colon)                         |
-| X-SSL-Client-DN	  | The subject Distinguished Name (DN) of the client's certificate (see [RFC 5280](https://tools.ietf.org/html/rfc5280#page-23) and [RFC 1719](https://tools.ietf.org/html/rfc1779#page-6)). The DN MUST contain the Country (C) attribute.  |
+| X-SSL-Client-SHA256 |	SHA-256 hash value of the DER encoded client's certificate. The so-called certificate fingerprint or thumbprint. (base64 encoded bytes, not base64 encoded hexadecimal string representation) |
+| X-SSL-Client-DN	  | The subject Distinguished Name (DN) of the client's certificate (see [RFC 5280](https://tools.ietf.org/html/rfc5280#page-23) and [RFC 1719](https://tools.ietf.org/html/rfc1779#page-6)). The DN MUST contain the Country (C) attribute. (it is possible to transmit DN string URL encoded) |
 
 ### 2.2. Federation Gateway Service