vertex DefaultQ2QAvatar.signCertificateRequest well sign any request, so long as it just has a Common Name.

DefaultQ2QAvatar.signCertificateRequest well sign any request, so long as it just has a Common Name.

Open tomprince opened this issue 11 years ago • 2 comments

I think perhaps it should only sign certificates that match the avatar.

Oct 13 '13 04:10 tomprince

It should also probably specify some basicConstraints but I've totally forgotten how to do that.

Jun 06 '14 02:06 glyph

Actually, I think that Vertex should do the thing that startssl does, where they discard everything about the CSR except for the public key.

Jun 06 '14 03:06 glyph