oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add more hxtool EKU options, and KeyUsage too

Browse Source 
This is necessary in order to have more control over, e.g., template
certificates for kx509.  But also it's good to have this more generally.

Some batteries not included.  Specifically: no attempt is made to validate that
given KeyUsage values are compatible with the subjectPublicKey's alrogithm and
parameters.
This commit is contained in:
Nicolas Williams
2019-06-23 14:31:13 -05:00
parent 005ba36b83
commit 859c587dc2
5 changed files with 91 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/hx509/version-script.map
View File

@@ -22,6 +22,7 @@ HEIMDAL_X509_1.2 {
_hx509_private_key_oid;
_hx509_private_key_ref;
_hx509_request_add_dns_name;
_hx509_request_add_eku;
_hx509_request_add_email;
_hx509_request_parse;
_hx509_request_print;
@@ -34,6 +35,7 @@ HEIMDAL_X509_1.2 {
hx509_ca_sign_self;
hx509_ca_tbs_add_crl_dp_uri;
hx509_ca_tbs_add_eku;
hx509_ca_tbs_add_ku;
hx509_ca_tbs_add_san_hostname;
hx509_ca_tbs_add_san_jid;
hx509_ca_tbs_add_san_ms_upn;