Fix subjectAlternativeName (SAN) generation for CSRs. CA/B Forum baseline
authorsthen <sthen@openbsd.org>
Fri, 17 Sep 2021 20:02:24 +0000 (20:02 +0000)
committersthen <sthen@openbsd.org>
Fri, 17 Sep 2021 20:02:24 +0000 (20:02 +0000)
commit71c23e2a74efa4cfaddc25450f491c8b687a9ee3
tree0d54c0af1483bfddc24ef38f4394ec5acc85d6ee
parent4e44baf3bd71e441cc1aaf3956f7ac3e3f44c366
Fix subjectAlternativeName (SAN) generation for CSRs. CA/B Forum baseline
requirements require that it's used in certificates so it makes sense to
generate a CSR compliant with this, additionally it replaces rather than
adds to the name in the certificate's subject which we weren't handling
correctly. Diff from wolf at wolfsden/cz, ok florian@
usr.sbin/acme-client/keyproc.c