Skip to content

Conversation

@evanrittenhouse
Copy link
Contributor

@evanrittenhouse evanrittenhouse commented Sep 4, 2025

@rushilmehra
Copy link
Collaborator

Looks good, would be nice to include a link to https://boringssl.googlesource.com/boringssl.git/+/refs/heads/master/include/openssl/x509.h#4690 in the commit description. Is writing a test too arduous?

@evanrittenhouse evanrittenhouse force-pushed the evanrittenhouse/check_ip_asc branch from aee62f5 to 87353c7 Compare September 4, 2025 16:25
@evanrittenhouse
Copy link
Contributor Author

Added link and test

@evanrittenhouse evanrittenhouse force-pushed the evanrittenhouse/check_ip_asc branch from 87353c7 to 6bc941f Compare September 4, 2025 16:28
@evanrittenhouse
Copy link
Contributor Author

evanrittenhouse commented Sep 4, 2025

Good call on the test 😛 , shoutout clippy. Will need a release as well

The binding corresponds to
https://boringssl.googlesource.com/boringssl.git/+/refs/heads/master/include/openssl/x509.h#4690.

To see the SANs covered by the specified cert, use:

```shell
❯ openssl x509 -in ./boring/test/alt_name_cert.pem -noout -text | grep -A1 "Subject Alternative Name"
            X509v3 Subject Alternative Name:
                DNS:example.com, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1, email:test@example.com, URI:http://www.example.com
```
@evanrittenhouse evanrittenhouse force-pushed the evanrittenhouse/check_ip_asc branch from 8a4c060 to 0ab00a9 Compare September 4, 2025 22:03
@kornelski kornelski merged commit 963425e into cloudflare:master Sep 5, 2025
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants