copy-trust-modifications: Use X509v3 Key Usage section to determine local trust for anchros added using tust utiltiy.

This commit is contained in:
DJ Lucas committed 2021-08-05 22:27:20 -05:00
1 parent 62864a82a5
commit 0faf62233b
2 files changed
+19 -9

No files matched your search

+2 -2
View File
@@ -4,8 +4,8 @@
- Use last OU= value for get_p11_label() fallback
- Omit x-certificate-extension in comparison for
copy-local-modifications
- Assume serverAuth for certificates added by 'trust anchors --store'
and generate a trusted certificate for use in LOCALDIR
- Use X509v3 Key Usage section to determine local trust for anchros
added using 'trust anchor --store'
- Add nss-{server,email}-distrust-after values in anchors - requires
p11-kit >= 0.23.19
- Use --filter=certificates for all stores