Skip to content

Cleaned up EKUs
Compare
Choose a tag to compare
@FiloSottile FiloSottile released this 25 Nov 13:16
· 14 commits to master since this release
v1.4.3
1a5aaff

The EKU logic is now simpler, and it follows the following rules

  • if an IP address, DNS name, or URI SAN is present, serverAuth is included
  • if -client is used, clientAuth is included
  • if an email address SAN in present, emailProtection is included

Certificate generation based on CSRs is now consistent with standard certificate generation.

Releases are now built from GitHub Actions.

Assets 7
Loading