[Feature request] Name Constraints (RFC5280 section 4.2.1.10)

[jrb0001]

Name constraints are useful to restrict a CA to only some defined domains, addresses and other namespaces. This is a really useful feature if you want or have to import some special purpose CA into your truststore but don't trust it enough to accept it for everything. It would be great if xca would allow to edit them through the UI.

[karlo1941]

Hi

You can use in Advanced Tab. I some time research this feature, and now could explain how its works.

[jrb0001]

Yeah, that's what I did. But I still think having a real UI for it would be better.

[baddev1]

Can you please explain how it works in the Advanced Tab? Or is there already a how to?

[karlo1941]

yes, i can

svētd., 2021. g. 24. janv., plkst. 08:47 — lietotājs baddev1 (< [email protected]>) rakstīja:

Can you please explain how it works in the Advanced Tab? Or is there already a how to?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/chris2511/xca/issues/90#issuecomment-766301592, or unsubscribe https://github.com/notifications/unsubscribe-auth/AI7RPIXZDM4YTHLTD54XNMTS3O7BLANCNFSM4GMRIEPQ .

[alyandon]

I'd really appreciate a step-by-step guide on how to do this in the advanced tab even if the feature never gets baked into the UI.