diff options
| author | Job Snijders <job@cvs.openbsd.org> | 2022-11-03 10:39:20 +0000 |
|---|---|---|
| committer | Job Snijders <job@cvs.openbsd.org> | 2022-11-03 10:39:20 +0000 |
| commit | 8a5f1b3a2544095dd8e0c30caf941c0722fe1f33 (patch) | |
| tree | db0e907c2051b9f35efd1217b195ce2c2943b9e1 /sbin/badsect | |
| parent | 0ddfe2112515e50cb8324806313d2aa134a5ceb1 (diff) | |
Constrain KeyUsage and ExtendedKeyUsage on both CA & EE certificates
RFC 6487 section 4.8.4 restricts the KeyUsage extension on EE
certificates to only be digitalSignature.
RFC 6487 section 4.8.5 forbids the ExtendedKeyUsage extension from
appearing on CA certificates. However, this may change in the future
through the standardisation process.
OK tb@
Diffstat (limited to 'sbin/badsect')
0 files changed, 0 insertions, 0 deletions