CVSROOT: /cvs Module name: src Changes by: st...@cvs.openbsd.org 2021/09/17 14:02:24
Modified files:
usr.sbin/acme-client: keyproc.c
Log message:
Fix subjectAlternativeName (SAN) generation for CSRs. CA/B Forum baseline
requirements require that it's used in certificates so it makes sense to
generate a CSR compliant with this, additionally it replaces rather than
adds to the name in the certificate's subject which we weren't handling
correctly. Diff from wolf at wolfsden/cz, ok florian@
