-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi,
thanks for the question, I clarify below. The current proposal is as follows: The x509-types/ca file will include 'Basic Constraints: critical' bit being set, which will impact All new CA/subCA certificates. There is no proposed command line option to revert this behavior. In the event that this causes unexpected/unacceptable subsequent problems then the user would be advised to edit the x509-types/ca file and remove the "critical" attribute. At which time, this proposed change could be reviewed further. This is why we are asking for any known issues, with, for example, older software, which may have difficulty with the 'critical' attribute. Regards. -----BEGIN PGP SIGNATURE----- Version: ProtonMail wsC5BAEBCgBtBYJpmN/JCRBPl5z2a5C4nUUUAAAAAAAcACBzYWx0QG5vdGF0 aW9ucy5vcGVucGdwanMub3Jno8Y43WmYKPFS5Ja88HjQoqG08eRwVokB/wyw cDl4D/wWIQQJvD1EZ6ONcnnFVVVPl5z2a5C4nQAAQycH/jBxEaBFpQuftOn4 7PwECwriOotAbyNL+HqF1IbNpHZ3OUYuJLiZnvH4EFECqIhFZgguxLXPiMYT YuBAI9HgqKEXzMywtJ/6wA+QpTwo0aB4jwblMV4qoz+yS52JdN8g5l2jHRIg NLFGLruKNq0wyZRD1AVrQurt8BNLhDUPHjT6YuIaoFVsnMeh4db0oe82theT CZ6j3BBnoCsWgnedqrfAqo6BG1xPG1xP4Z7hLFKssdCYK1NqfZlfnM8N6Rkt ZxiQrCyZd6b+9A2yYuEHE2w4Sa3G7CROPLyxHMFdPmScUWNy2ccTbAE3nEci PcWw2b34RqLylUTwbVU0GCjEiUY= =EcCb -----END PGP SIGNATURE-----
publickey - [email protected] - 0x09BC3D44.asc
Description: application/pgp-keys
publickey - [email protected] - 0x09BC3D44.asc.sig
Description: PGP signature
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
