Paul Donald

> Maybe it needs more expedite way to support "enterprise ca" signing like export csr (adding altnames), then import crt while crypto key never leaves the device. I wonder whether...

Author: Pat. Year: 2019. 👀 Multiple sAN are possible so adding the various actual URL to reach openwrt would be helpful.

I suppose more detail has the potential for more problems. And now we have a valid use case. I've not yet upgraded macOS. And I use Firefox usually anyway. But...

Does it outright reject the certificate or does it present a separate warning for this?

> for safari you need to reduce validity period from 730 to 497 days in uhttpd init file. It is in cabforum spec, just that only apple rejects excessive validity...

https://github.com/openwrt/openwrt/blob/b72c4b53860ef7a65f486212c7393e2c2b57344b/package/system/procd/files/procd.sh#L621-L634

I would suggest that the ubox verify here also tries a 'port' type if the 'portrange' type check fails https://git.openwrt.org/?p=project/ubox.git;a=blob;f=validate/validate.c;h=e72b8117ecd8b680778b0f5c7637ed6546a7736b;hb=refs/heads/master#l593 or https://github.com/openwrt/ubox/blob/85f1053019caf4cd333795760950235ee4529ba7/validate/validate.c#L593 ping @jow- @robimarko @Ansuel from e.g. ```c static...

Sent a patch to the dev mailing list...

Changes here require changes in unbound startup modules to be effective. Search for the option there. Once you've added an option for `$UB_TXT_DOMAIN` then you can implement something in the...

Hi @missing233 what am I looking at here? Are 25 and 26 from a REQUEST packet? Could you test with latest master, whether this behaviour still manifests?