diff options
| author |   sthen <sthen@openbsd.org> | 2014-03-11 15:25:34 +0000 |
|---|---|---|
| committer | sthen <sthen@openbsd.org> | 2014-03-11 15:25:34 +0000 |
| commit | 56f99fc95703cbcea4bec1b46bf317d4375fe14f (patch) | |
| tree | 03da38b91d80ca471a97c995063fa9fd23c64283 /sys/netinet/tcp_debug.c | |
| parent | bugfix update to 1.4.6 (diff) | |
| download | wireguard-openbsd-56f99fc95703cbcea4bec1b46bf317d4375fe14f.tar.xz wireguard-openbsd-56f99fc95703cbcea4bec1b46bf317d4375fe14f.zip | |
For CA generation, go back to using a two-step procedure to create a CSR and
then self-sign it rather than using the "openssl req" shortcut. This allows
us to specify -extfile and thus set the correct certificate extensions so
that stricter SSL implementations will trust this as a CA cert, and matches
how things are done in ssl(8). This is basically a partial revert of r1.77.
Researched by chrisz@, tweak/ok jmc@ ok beck@
Diffstat (limited to 'sys/netinet/tcp_debug.c')
0 files changed, 0 insertions, 0 deletions