-
ocsp must staple 是在签发证书时，往证书里追加的相关标识，用于明确告诉浏览器，ocsp 请求必须由服务端装订，即由服务端去查询好证书状态，再返回给浏览器。
目前能够签署出该扩展的证书的`CA`只有`Let's Encrypt`。
如果要设置`OCSP Must-Staple`，需要在使用`openssl`生成`csr`的时候，修改`openssl.cnf`中的内容：
…
-
### Describe the bug
zk cluster:
```yaml
apiVersion: zookeeper.zncdata.dev/v1alpha1
kind: ZookeeperCluster
metadata:
labels:
app.kubernetes.io/name: zookeepercluster
app.kubernet…
-
Пытаюсь использовать свои (подписанные другим сертификатом) сертификаты для создания сервера, генерирую их следующим образом:
Root CA
1)
```
openssl genpkey -algorithm bign -pkeyopt params:bign…
D0R1K updated
3 months ago
-
## Context
### Generate certificates
```shell
# ca certificate
openssl genpkey -algorithm RSA -out ca.key
openssl req -new -x509 -key ca.key -sha256 -days 3650 -out ca.crt -subj "/CN=My-CA"
…
-
I recently had to do a clean install of my OS (new machine build).
I have reported this bug in the past and it still hasn't been resolved but for some reason you guys keep closing the ticket as resol…
-
c2patool 0.6.2 is supposed to accept a user-specified cert via environment variable or in the manifest. I have been unable to get this to work.
The documentation for c2patool 0.6.2 lacks details:
…
-
I noticed that first compile takes about 3.5 sec.
Then each other call still takes 0.3sec. **300ms is still too much!**
I do use Compile / Run and (v3.9.3):
- cold run = 3.5 sec (maybe somehow/ca…
-
Hello Libreswan Team.
When I use Libreswan, I found that Libreswan supports wildcard certificates for id matching (ID_FQND type). For example, when a certificate (CN=abcde, SAN dns: *.org) issued b…
-
### Have you already looked into this bug?
- [X] I have checked the [Troubleshooting Guide](https://devilbox.readthedocs.io/en/latest/support/troubleshooting.html)
- [X] I have checked [Release notes…
-
The goal here is to create a data specification to be used in an index for modded assets. This issue serves for discussion of the specifics.
Initially, I have some questions that I think might help…