net/data/ssl/scripts/generate-test-certs.sh - Issue 2735733003: Disable commonName matching for certificates

Keyboard Shortcuts

	File
u :	up to issue
j / k :	jump to file after / before current file
J / K :	jump to next file with a comment after / before current file
	Side-by-side diff
i :	toggle intra-line diffs
e :	expand all comments
c :	collapse all comments
s :	toggle showing all comments
n / p :	next / previous diff chunk or comment
N / P :	next / previous comment
<Up> / <Down> :	next / previous line

	Issue
u :	up to list of issues
j / k :	jump to patch after / before current patch
o / <Enter> :	open current patch in side-by-side view
i :	open current patch in unified diff view

	Issue List
j / k :	jump to issue after / before current issue
o / <Enter> :	open current issue

Unified Diff: net/data/ssl/scripts/generate-test-certs.sh

Issue 2735733003: Disable commonName matching for certificates (Closed)

Patch Set: Created 3 years, 9 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

Index: net/data/ssl/scripts/generate-test-certs.sh

diff --git a/net/data/ssl/scripts/generate-test-certs.sh b/net/data/ssl/scripts/generate-test-certs.sh

index 9a1a912ead45bcb7a76aca1605a6b962de8b3f0d..f5395e4cf4dec3577d4e9c57ec0739e0e525e0fe 100755

--- a/net/data/ssl/scripts/generate-test-certs.sh

+++ b/net/data/ssl/scripts/generate-test-certs.sh

@@ -210,7 +210,7 @@ SUBJECT_NAME="req_punycode_dn" \

## Reject intranet hostnames in "publicly" trusted certs

# 365 * 3 = 1095

SUBJECT_NAME="req_intranet_dn" \

- try openssl req -x509 -days 1095 \

+ try openssl req -x509 -days 1095 -extensions req_intranet_san \

-config ../scripts/ee.cnf -newkey rsa:2048 -text \

-out ../certificates/reject_intranet_hosts.pem

« no previous file with comments | « net/data/ssl/scripts/generate-policy-certs.sh ('k') | net/data/ssl/scripts/policy.cnf » ('j') | no next file with comments »