v1.4.3

NVlabs/Sanav1.4.3Nov 25, 2020by FiloSottile

AI Summary

The Extended Key Usage (EKU) logic has been simplified and made more consistent with standard certificates. The tool now builds releases via GitHub Actions.

Key Highlights

  • Simplified EKU logic for serverAuth, clientAuth, and emailProtection
  • Consistent certificate generation with standard certificates
  • Releases built from GitHub Actions

New Features

  • Simplified EKU logic
  • GitHub Actions builds

Full Release Notes

The EKU logic is now simpler, and it follows the following rules

* if an IP address, DNS name, or URI SAN is present, serverAuth is included
* if `-client` is used, clientAuth is included
* if an email address SAN in present, emailProtection is included

Certificate generation based on CSRs is now consistent with standard certificate generation.

Releases are now built from GitHub Actions.