Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Forbid a self-signed certificate from being expired/renewed/revoked #1274

Merged
merged 2 commits into from
Dec 10, 2024

Conversation

TinCanTech
Copy link
Collaborator

Example: If a self-signed certificate is revoked then 'index.txt' becomes contaminated by a self-signed certificate serial number, which has not been vetted for duplicates.

@TinCanTech TinCanTech self-assigned this Dec 9, 2024
Example: If a self-signed certificate is revoked then 'index.txt'
becomes contaminated by a self-signed certificate serial number,
which has not been vetted for duplicates.

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech TinCanTech force-pushed the forbid-ss-exp-rev-ren branch from 8a41190 to ab45ae7 Compare December 9, 2024 22:34
Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
@TinCanTech TinCanTech added this to the v3.2.2 milestone Dec 9, 2024
@TinCanTech TinCanTech linked an issue Dec 9, 2024 that may be closed by this pull request
@TinCanTech TinCanTech added BUG-FIX ChangeLog Item renew I cannot go back; No. But if you could, would you really want to? Version 3.2.2-Release labels Dec 9, 2024
@TinCanTech TinCanTech merged commit 7eadcc5 into OpenVPN:master Dec 10, 2024
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
BUG-FIX ChangeLog Item renew I cannot go back; No. But if you could, would you really want to? Version 3.2.2-Release
Projects
None yet
Development

Successfully merging this pull request may close these issues.

self-signed certs must not be able to use expire/renew/revoke*
1 participant