Skip to content

v1.3.2

Choose a tag to compare

View all tags
@oriolrius oriolrius released this 02 Dec 13:52
· 1047 commits to main since this release
v1.3.2
613d2ff

Bug Fixes

  • CA certificates now include proper X.509 extensions (#2)
    • basicConstraints=critical,CA:TRUE - Identifies certificate as a CA (RFC 5280 requirement)
    • keyUsage=critical,keyCertSign,crlSign - Allows signing certificates and CRLs
    • subjectKeyIdentifier=hash - Helps identify certificates issued by this CA

This fixes certificate chain validation failures in TLS clients and Java truststores when using CA certificates created by PKI Manager.

Assets 2
Loading