This is a misleading webrev, while the number of changes is large, all the changes to certificates are a result of the changes to openssl.cnf and generate_certs.py. All the files after openssl.cnf are automatically generated.

The purpose of this fix is to add support for the keyUsage extension which controls what a certificate may be used for. The values which are now supported are digitalSignature (used to sign the packages), keyCertSign (used to sign other certificates), and cRLSign (used to sign crls).

Webrev:
http://cr.opensolaris.org/~bpytlik/ips-16856-v1/

Bug:
https://defect.opensolaris.org/bz/show_bug.cgi?id=16856

Thanks for taking a look,
Brock
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to