Skip to content

make-ca-1.8

Choose a tag to compare

View all tags
@djlucas djlucas released this 28 Aug 13:50
· 43 commits to master since this release
v1.8
4bbde9a

Changes since 1.7:

  • Use get_p11_label for certificate name in output when processing local certificates
  • Use "Subject:" line for get_p11_label()
  • Use last OU= value for get_p11_label() fallback
  • Fix several text issues in get_p11_label - Thanks to Michael Joost
  • Omit x-certificate-extension in comparison for copy-local-modifications
  • Use X509v3 Key Usage section to determine local trust for anchors added using 'trust anchor --store'
  • Add nss-{server,email}-distrust-after values in anchors - requires p11-kit >= 0.23.19
  • Use --filter=certificates for all stores
  • Fix output of NSSDB and Java PCKS#12 stores
  • Correct incorrectly named get_p11_val()
  • Use .p11-kit extension for anchors
  • Handle getopt style short options in get_args()
  • Use Microsoft's trust for code signing with -i | --mscodesign
    Note: this is manually generated, will add CCADB when availalble
  • Backup and restore anchors with PKIX extensions
Assets 3
Loading