Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to subjectAltNames #58

Open
ikapelyukhin opened this issue Jun 29, 2020 · 2 comments
Open

Switch to subjectAltNames #58

ikapelyukhin opened this issue Jun 29, 2020 · 2 comments
Labels
enhancement New feature or request help wanted Extra attention is needed other-maintainer Not maintained by the core YaST team

Comments

@ikapelyukhin
Copy link
Contributor

ikapelyukhin commented Jun 29, 2020

This is a follow-up to #57.

Currently during CA and server certificate generation we are using Common Name field, which seems to be deprecated (RFC2818 states: "Although the use of the Common Name is existing practice, it is deprecated and Certification Authorities are encouraged to use the dNSName instead.") and has a rather short maximum length of 26 characters.

Instead only subjectAltNames should be used, they should allow hostnames up to 256 characters long.

  • Common Name should be left empty during certificate generation, for both the CA certificate and the server certificate.
  • Common name field in the generation dialog should be dropped.
  • Maximum length check needs to be implemented for subjectAltNames form fields.
@ikapelyukhin ikapelyukhin added the enhancement New feature or request label Jun 29, 2020
@ngetahun
Copy link
Collaborator

I have created a kanban card here https://trello.com/c/jy27HDvo/4019-yast-rmt-switch-to-subjectaltnames

@ngetahun ngetahun added the help wanted Extra attention is needed label Jan 13, 2021
@ancorgs
Copy link

ancorgs commented Mar 16, 2021

Since the yast2-smt package is developed and maintained by the SCC Team at SUSE, instead of the core YaST Team, I'm adding the "other-maintainer" label to this in order to help filtering the various list of issues.

@ancorgs ancorgs added the other-maintainer Not maintained by the core YaST team label Mar 16, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed other-maintainer Not maintained by the core YaST team
Projects
None yet
Development

No branches or pull requests

3 participants