Skip to content

Commit

Permalink
Update the critical to false for SUBJECT_ALT_NAME
Browse files Browse the repository at this point in the history
Refer to ek-credential spec Section 3.2.9 Subject Alternative Name,
this extension should be non-critical when subject is non-empty.

Signed-off-by: Ceping Sun <cepingx.sun@intel.com>
  • Loading branch information
sunceping committed Sep 18, 2023
1 parent 20d5e96 commit 92a1866
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/crypto/src/ek_cert.rs
Original file line number Diff line number Diff line change
Expand Up @@ -161,7 +161,7 @@ pub fn generate_ek_cert(
.add_extension(Extension::new(KEY_USAGE, Some(true), Some(&ku))?)?
.add_extension(Extension::new(
SUBJECT_ALT_NAME,
Some(true),
Some(false),
Some(&sub_alt_name),
)?)?
.sign(&mut sig_buf, signer)?
Expand Down

0 comments on commit 92a1866

Please sign in to comment.