make-ca: Use p11label value and .p11-kit extension for anchor naming.

This commit is contained in:
DJ Lucas
2021-08-05 22:31:13 -05:00
parent 0faf62233b
commit 8baf93dc22
2 changed files with 11 additions and 8 deletions

View File

@@ -4,13 +4,14 @@
- Use last OU= value for get_p11_label() fallback
- Omit x-certificate-extension in comparison for
copy-local-modifications
- Use X509v3 Key Usage section to determine local trust for anchros
- Use X509v3 Key Usage section to determine local trust for anchors
added using 'trust anchor --store'
- Add nss-{server,email}-distrust-after values in anchors - requires
p11-kit >= 0.23.19
- Use --filter=certificates for all stores
- Fix output of NSSDB and Java PCKS#12 stores
- Correct incorrectly named get_p11_val()
- Use p11label value and .p11-kit extension for anchor naming
1.7 - Revert help2man update (requires complete perl environment)
1.6 - Fix install target for make -j#
- Add detailed dependency info and add note about configuration file