Respect custom x509 ext in selfsign

- No longer ignore specified x509 extensions in the CSR when generating a self-signed certificate.
cloudflare · Apr 7, 2023 · f7af124 · f7af124
1 parent b4d0d87
commit f7af124
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/selfsign/selfsign.go b/selfsign/selfsign.go
@@ -46,6 +46,7 @@ func parseCertificateRequest(priv crypto.Signer, csrBytes []byte) (template *x50
 		EmailAddresses:     csr.EmailAddresses,
 		IPAddresses:        csr.IPAddresses,
 		URIs:               csr.URIs,
+		ExtraExtensions:    csr.Extensions,
 	}
 
 	return