cfssl

cfssl copied to clipboard

i run the following sequence of commands to generate a self-signed root ca, and sign a `server` cert with it ```sh cfssl genkey -initca csr.json | cfssljson -bare root cfssl...

ShinyZero0

Is the cfssl repo still being maintained? There hasn't been any action on recent PRs.

2

-

thebluesoul

closes #1401

derekmarcotte

Would like to update the generation of the SKI to use a more modern algorithm. Seems prudent in the face of SHA-1 problems. Already rolled out by [letsencrypt](https://community.letsencrypt.org/t/enabling-sha256-subject-key-identifiers-for-end-entity-certificates/211453).

derekmarcotte

In the current definition, a comma (`json:"OID,omitempty"**,** yaml:"OID,omitempty"`) that breaks the reflection.

utking

According to [official doc](https://pkg.go.dev/crypto/x509#Certificate.CreateCRL), `CreateCRL` is not RFC 5280 conformant and should be deprecated. This PR replaces it with new API, as well as adds an optional parameter for CRL...

ArchangelSDY