Skip to content

Conversation

@baloo
Copy link
Member

@baloo baloo commented Oct 7, 2025

No new certificates should be built with anything but V3. I believe it should be the default.

Followup to #2057

No new certificates should be built with anything but V3. I believe it
should be the default.
@baloo
Copy link
Member Author

baloo commented Oct 7, 2025

cc @dishmaker

@baloo
Copy link
Member Author

baloo commented Oct 7, 2025

Actually the RFC is explicit it should default to V1 ...
https://datatracker.ietf.org/doc/html/rfc5280#section-4.1

@baloo baloo closed this Oct 7, 2025
@baloo baloo deleted the baloo/x509-cert/v3-default branch October 7, 2025 18:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant