v1.4.3

blackboardsh/electrobunv1.4.3Nov 25, 2020by FiloSottile

AI Summary

Simplified Extended Key Usage (EKU) logic for certificates, making CSR generation consistent with standard certificates. Builds are now automated via GitHub Actions.

Key Highlights

  • Simplified EKU rules: serverAuth for IP/DNS/URI SANs, clientAuth for -client flag, and emailProtection for email SANs.
  • Certificate generation based on CSRs is now consistent with standard certificate generation.
  • Releases are now built from GitHub Actions.

New Features

  • Simplified EKU logic for easier certificate management.
  • GitHub Actions integration for automated release builds.

Full Release Notes

The EKU logic is now simpler, and it follows the following rules

* if an IP address, DNS name, or URI SAN is present, serverAuth is included
* if `-client` is used, clientAuth is included
* if an email address SAN in present, emailProtection is included

Certificate generation based on CSRs is now consistent with standard certificate generation.

Releases are now built from GitHub Actions.