You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
AuthArea: what it touches
ImprovementsKind: in v2.1.232,
ImprovementsSection of the release
What
When the cloud gateway presents a certificate that does not match the pinned fingerprint, the sign-in failure message can now name the fingerprint that was presented as well as the one that was trusted.
Details
Both fingerprints are attached to the thrown error, and a new extractor reads them off the error or its cause.
Evidence
gateway TLS certificate does not match the pinned fingerprint
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
