7 Commits

Author	SHA1	Message	Date
Marcial Rosales	e7cb2420a7	Verify non-zero DNS and email SAN	2024-10-29 16:41:20 +01:00
Marcial Rosales	1abc4ed02f	Extract client_id from client cert	2024-08-30 11:39:48 +01:00
Rin Kuryloski	0881fe2ddb	Adjust test cert generation in rabbitmq_ct_helpers ... In some cases with OTP 26 `{bad_cert,invalid_ext_key_usage}` handshake failures would occur. This change seems to fix that.	2023-05-23 13:15:28 +02:00
Michael Klishin	7c47d0925a	Revert "Correct a double quote introduced in #4603" ... This reverts commit 6a44e0e2ef. That wiped a lot of files unintentionally	2022-04-20 16:05:56 +04:00
Michael Klishin	6a44e0e2ef	Correct a double quote introduced in #4603	2022-04-20 16:01:29 +04:00
Michael Klishin	57eb064824	openssl.cnf: use sha256 for default_md ... Modern Python and OpenSSL versions can reject certificates that use SHA-1 as insufficiently secure. This is the case with Python 3 on Debian Buster, for example Per discussion with @pjk25 @dumbbell	2021-04-14 19:00:39 +03:00
Luke Bakken	15e39f2d3c	Use sed to set DNS.1 in SAN since LibreSSL does not do env vars correctly	2018-08-27 08:22:05 -07:00