Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

openssl_csr: add support for name constraints extension #92

Conversation

felixfontein
Copy link
Contributor

SUMMARY

Fixes #46.

ISSUE TYPE
  • Feature Pull Request
COMPONENT NAME

openssl_csr
openssl_csr_info

@felixfontein
Copy link
Contributor Author

ready_for_review

@felixfontein
Copy link
Contributor Author

Ok, I had to add another commit. While adding this feature, I noticed that IP address ranges weren't supported at all so far. They cannot be used for SANs, but they can (and must - IP addresses won't work) be used for name constraints. I originally wanted to create a new PR for this, but noticed that I can only test it once this is merged - so I added it here :)

@felixfontein
Copy link
Contributor Author

(rebased to remove conflict)

@felixfontein felixfontein mentioned this pull request Aug 9, 2020
@MarkusTeufelberger
Copy link
Contributor

Looks good to me.

Shipit! :-)

@felixfontein felixfontein merged commit 84342fc into ansible-collections:main Aug 18, 2020
@felixfontein felixfontein deleted the openssl_csr-name-constraints branch August 18, 2020 10:23
@felixfontein
Copy link
Contributor Author

@MarkusTeufelberger thanks a lot for reviewing this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

openssl_csr missing nameConstraints extension
2 participants