New commits:
commit 3d887fec8eeabcf14247d9c53dcd0a2895d95c74
Author: Andrew Cagney <[email protected]>
Date: Fri Mar 14 18:14:21 2025 -0400
testing x509: clean up root and intermediate certs
- drop ExtendedKeyUsage
RFC says it shouldn't be needed
- reduce KeyUsage to certSigning,crlSigning,critical
RFC says should be critical
RFC seems to imply these are explict when BC=CA
- make BasicConstraints on CAs critical
RFC says should
- expand BC tests to explicitly cover both critical and noncritical
close #2082 overhaul BC, KU, and EKU, of basic root and intermediate certs
_______________________________________________
Swan-commit mailing list -- [email protected]
To unsubscribe send an email to [email protected]
