itzg / itzg/cert-helper

default to prompt for subjectAltName for compatibility and security

Open
#5 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
3
Forks
0
PR merge metrics
No merged PRs in 30d

Description

Several organizations and software packages (Chrome, Firefox, Safari, Apple, Mozilla, Google) have moved to not trust certificates unless the Subject Alternative Name is filled out with FQDN, hostname, or other relevant info.

The script already allows for this with the command line args to the create command.

Recommend default to prompting for this info.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start at the create command and review its existing command-line arguments for Subject Alternative Name input. The change is complete when certificate creation prompts for the relevant hostname or other SAN information by default while preserving the existing argument-based support.

Written by the indexing model from the issue text.

Assessment

Tech stack
shell
Domain
cli, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.