This is a misleading webrev, while the number of changes is large, all
the changes to certificates are a result of the changes to openssl.cnf
and generate_certs.py. All the files after openssl.cnf are automatically
generated.
The purpose of this fix is to add support for the keyUsage extension
which controls what a certificate may be used for. The values which are
now supported are digitalSignature (used to sign the packages),
keyCertSign (used to sign other certificates), and cRLSign (used to sign
crls).
Webrev:
http://cr.opensolaris.org/~bpytlik/ips-16856-v1/
Bug:
https://defect.opensolaris.org/bz/show_bug.cgi?id=16856
Thanks for taking a look,
Brock
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss