boring
boring copied to clipboard
Add Builders for missing X509v3 Extensions
trafficstars
Hello, I've noticed that some of the standard X509 Extensions defined in RFC5280 aren't implemented as Builders in `:x509::extensions'. Here is an overview of the current status:
- [x] Authority Key Identifier
- [x] Subject Key Identifier
- [x] Key Usage
- [ ] Certificate Policies
- [ ] Policy Mappings
- [x] Subject Alternative Name
- [ ] Issuer Alternative Name
- [ ] Subject Directory Attributes
- [x] Basic Constraints
- [ ] Name Constraints
- [ ] Policy Constraints
- [x] Extended Key Usage
- [ ] CRL Distribution Points
- [ ] Inhibit anyPolicy
I think that support for more commonly used extensions like CRL Distribution Points or Name Constraints would be really great, because it reduces the margin for error drastically by reducing the need to call x509::X509Extension::new_nid.
I can pick these up
Assigned