Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove AIA extension from root CA signing cert #4434

Merged
merged 2 commits into from
May 9, 2023
Merged

Remove AIA extension from root CA signing cert #4434

merged 2 commits into from
May 9, 2023

Commits on May 9, 2023

  1. Remove AIA extension from root CA signing cert 

    The bootstrap caCert.profile has been modified such that root
CA signing certs will no longer have an AIA extension. The
regular CA signing cert profiles have not been modified so
sub CA signing certs will continue to have an AIA extension.
    @edewata
    edewata committed May 9, 2023
    Configuration menu
    Copy the full SHA
    712f1be View commit details
    Browse the repository at this point in the history

  2. Update root CA and sub CA tests 

    Some CI tests have been updated to validate the AIA
extension removal from root CA signing certs.

The test-ca-signing-cert-ext.sh has been modified to verify
that there's no AIA extensions in root CA signing cert.

The test-subca-signing-cert-ext.sh has been modified to check
for an AIA extension in sub CA signing cert pointing to the
root CA's OCSP responder.

A new test-ms-subca-signing-cert-ext.sh has been added as a
copy of the original test-subca-signing-cert-ext.sh to check
for MS sub CA extensions.
    @edewata
    edewata committed May 9, 2023
    Configuration menu
    Copy the full SHA
    7097a06 View commit details
    Browse the repository at this point in the history