denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pki: Print and document the name constraint type for DNS or email constraints

Browse Source 
As email constraints may be for a specific host, it is not clear from the
name itself if it is a DNS or email constraint.
This commit is contained in:
Martin Willi
2014-10-30 11:40:48 +01:00
parent a6c8647eca
commit b9d38c9fa2
3 changed files with 46 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pki/man/pki---issue.1.in
+14 -2
View File
@@ -147,10 +147,22 @@ times.
Set path length constraint.
.TP
.BI "\-n, \-\-nc-permitted " name
Add permitted NameConstraint extension to certificate.
Add permitted NameConstraint extension to certificate. For DNS or email
constraints, the identity type is not always detectable by the given name. Use
the
.B dns:
or
.B email:
prefix to force a constraint type.
.TP
.BI "\-N, \-\-nc-excluded " name
Add excluded NameConstraint extension to certificate.
Add excluded NameConstraint extension to certificate. For DNS or email
constraints, the identity type is not always detectable by the given name. Use
the
.B dns:
or
.B email:
prefix to force a constraint type.
.TP
.BI "\-M, \-\-policy-mapping " issuer-oid:subject-oid
Add policyMapping from issuer to subject OID.