search

cloudflare / certmgr

Automated certificate management using a CFSSL CA.
BSD 2-Clause "Simplified" License
218 stars 40 forks source link

Allow specs to configure what key usage we validate against #103

Closed jmunson closed 4 years ago

jmunson commented 4 years ago

When a cert is being refreshed we validate it with cert.Verify(), which by default assumes a cert is only valid if it can be used for server authentication.

These changes allow us to specify what our intended usages are and validate against that instead.