Starstruk Logo MarkStarstruk

v1.4.3

ibnaleem/gosearchv1.4.3Nov 25, 2020by FiloSottile

AI Summary

This release simplifies the Extended Key Usage (EKU) logic for certificate generation to align with standard practices and ensures consistency with CSR-based generation.

Key Highlights

  • Simplified EKU logic for IP, DNS, and URI SANs
  • Simplified EKU logic for clientAuth flag
  • Simplified EKU logic for email SANs
  • Certificate generation now consistent with standard generation

New Features

  • Simplified EKU logic

Full Release Notes

The EKU logic is now simpler, and it follows the following rules

* if an IP address, DNS name, or URI SAN is present, serverAuth is included
* if `-client` is used, clientAuth is included
* if an email address SAN in present, emailProtection is included

Certificate generation based on CSRs is now consistent with standard certificate generation.

Releases are now built from GitHub Actions.