RFE: Support 'Must-Staple' TLS Feature Extension

[pki-bot]

This issue was migrated from Pagure Issue #1706. Originally filed by bja (@sirwalrus) on 2015-11-30 17:54:56:

• Assigned to nobody

---

Firefox recently announced support for the Must-Staple extension[1], which is specified in the certificate by the CA. This feature is highly desirable in an enterprise environment. It would be great if Dogtag supported this.

1 - https://blog.mozilla.org/security/2015/11/23/improving-revocation-ocsp-must-staple-and-short-lived-certificates/

[pki-bot]

Comment from mharmsen (@mharmsen) at 2015-11-30 20:47:53

Per CS/DS meeting of 11/30/2015: 10.4 major

[pki-bot]

Comment from bja (@sirwalrus) at 2017-02-27 14:01:32

Metadata Update from @sirwalrus:

• Issue set to the milestone: UNTRIAGED