px5g-mbedtls: add subjectAltName and extendedKeyUsage to SSL certs
authorHannu Nyman <hannu.nyman@iki.fi>
Wed, 1 May 2024 11:49:46 +0000 (14:49 +0300)
committerRobert Marko <robimarko@gmail.com>
Tue, 13 Aug 2024 19:07:13 +0000 (21:07 +0200)
commitefca89daefc0347c64209e4e588fe17536933cf6
treed4775b628b4e725d3d67ee62661deedd39fd44e3
parentccc06f67168abdff5d842a706a68c6ced6ef750b
px5g-mbedtls: add subjectAltName and extendedKeyUsage to SSL certs

To better acommodate with the current browsers' requirements, also
self-signed certificates should have subjectAltName and
extendedKeyUsage defined in the self-signed x509 SSL certificates.

The following case sensitive options are now possible:
-addext subjectAltName=DNS:...
-addext subjectAltName=EMAIL:...
-addext subjectAltName=IP:...
-addext subjectAltName=URI:...
-addext extendedKeyUsage=serverAuth OR -addext extendedKeyUsage=any

Initial draft by Paul Donald <newtwen@gmail.com>

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Link: https://github.com/openwrt/openwrt/pull/15366
Signed-off-by: Robert Marko <robimarko@gmail.com>
package/utils/px5g-mbedtls/Makefile
package/utils/px5g-mbedtls/px5g-mbedtls.c