Nick Bastin

Re-root logfile paths

1

Our log paths are really long, but they all share a common root that could easily be pruned, maybe something in the config file: ``` files-prune-root: '/mnt/log-data-store/' files: - '/mnt/log-data-store/privoxy/varlogprivoxy/privoxy.log'...

Would be nice if we could give logfiles a short name in the dropdown, which might more accurately reflect what it is to the user when you are aggregating logs...

FR: Allow clients to set extension policies for x.509 verification

21

Given that the default policy seems to generally be to verify against the CA/B ruleset (a reasonable default), it would be nice for non-internet PKI users if we could pass...

x509 verification fails on critical EKU

2

If any certificate in the verification chain has a critical EKU, verification will fail. RFC 5280 (and X.509 in general) allows EKU to be either critical or non-critical for any...

VerificationError exceptions don't report which cert causes the problem, which can make debugging fairly time consuming (or impossible, if you're not in the situation of issuing your own certs).