cloudflare / cloudflare/cfssl

Name Constraints

Open
#713 7 comments 13 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

I can't seem to find anywhere an example of setting X509 name constraints on a CA cert. Is it possible to do this?

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points, so start by locating the CA certificate construction and X.509 extension handling in the Go codebase. Done would require a decided approach for setting name constraints and a documented example, with tests showing the resulting CA certificate contains them.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cryptography, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.