Starstruk Logo MarkStarstruk

v1.4.3

FiloSottile/mkcertv1.4.3Nov 25, 2020by FiloSottile

AI Summary

This release simplifies the EKU (Extended Key Usage) logic to follow clear rules based on SAN types, and makes certificate generation from CSRs consistent with standard certificate generation.

Key Highlights

  • Simpler EKU logic
  • serverAuth included when IP/DNS/URI SAN is present
  • clientAuth included with -client flag
  • emailProtection included with email address SAN
  • Consistent certificate generation between CSR and standard

New Features

  • Simplified EKU logic
  • Consistent CSR certificate generation

Full Release Notes

The EKU logic is now simpler, and it follows the following rules

* if an IP address, DNS name, or URI SAN is present, serverAuth is included
* if `-client` is used, clientAuth is included
* if an email address SAN in present, emailProtection is included

Certificate generation based on CSRs is now consistent with standard certificate generation.

Releases are now built from GitHub Actions.