Commit Graph

10 Commits (master)

Author SHA1 Message Date
Herman Slatman cc26a0b394
Explicitly disable wildcard Common Name constraint 2 years ago
Herman Slatman 2b7f6931f3
Change Subject Common Name verification
Subject Common Names can now also be configured to be allowed or
denied, similar to SANs. When a Subject Common Name is not explicitly
allowed or denied, its type will be determined and its value will be
validated according to the constraints for that type of name (i.e. URI).
2 years ago
Herman Slatman a2cfbe3d54
Fix (part of) PR comments 2 years ago
Herman Slatman 82e0033428
Remove Adder options 2 years ago
Herman Slatman 679e2945f2
Disallow name constraint wildcard notation 2 years ago
Herman Slatman a7eb27d309
Fix URI domains IDNA support 2 years ago
Herman Slatman 9617edf0c2
Improve internationalized domain name handling
This PR improves internationalized domain name handling according
to rules of IDNA and based on the description in RFC 5280, section 7:
https://datatracker.ietf.org/doc/html/rfc5280#section-7.

Support for internationalized URI(s), so-called IRIs, still needs to
be done.
2 years ago
Herman Slatman 066bf32086
Fix part of PR comments 2 years ago
Herman Slatman 6440870a80
Clean up, improve test cases and coverage 2 years ago
Herman Slatman 1e808b61e5
Merge logic for X509 and SSH policy 2 years ago