Skip to content

Added support for setting CRL distribution point URI#67

Merged
tsaarni merged 1 commit intomasterfrom
crl-dp
Oct 26, 2024
Merged

Added support for setting CRL distribution point URI#67
tsaarni merged 1 commit intomasterfrom
crl-dp

Conversation

@tsaarni
Copy link
Copy Markdown
Owner

@tsaarni tsaarni commented Oct 26, 2024

Adds new field Certificate.CRLDistributionPoints which is an array of strings. When defined, CRL Distribution Points extension will be added to the certificate.

When using the Go API, it is a field in Certificate:

cert := Certificate{Subject: "CN=Joe", CRLDistributionPoints: []string{"http://example.com/crl.pem"}}

When using the command line and manifest file:

subject: cn=server
crl_distribution_points:
- http://ca1.example.com/crl.pem
- http://ca2.example.com/crl.pem

The generated certificate will have following extension added:

Certificate:
    Data:
        X509v3 extensions:
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:http://ca1.example.com/crl.pem
                Full Name:
                  URI:http://ca2.example.com/crl.pem

Fixes #23

@tsaarni tsaarni merged commit 091ff07 into master Oct 26, 2024
@tsaarni tsaarni deleted the crl-dp branch October 26, 2024 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add field for setting CRL DP URI

1 participant