mirror of
https://github.com/xcat2/confluent.git
synced 2026-05-17 11:54:19 +00:00
6c9c58f464
For one, apply more rules from CA/B forum. This includes including KU and EKU extensions, marking basicConstraints critical, and randomized serial numbers. Also make the backdate and end date configurable, to allow for the BMC certs to have a more palatable validity interval.