Skip to content

Conversation

baloo
Copy link
Member

@baloo baloo commented Oct 7, 2025

No new certificates should be built with anything but V3. I believe it should be the default.

Followup to #2057

No new certificates should be built with anything but V3. I believe it
should be the default.
@baloo
Copy link
Member Author

baloo commented Oct 7, 2025

cc @dishmaker

@baloo
Copy link
Member Author

baloo commented Oct 7, 2025

Actually the RFC is explicit it should default to V1 ...
https://datatracker.ietf.org/doc/html/rfc5280#section-4.1

@baloo baloo closed this Oct 7, 2025
@baloo baloo deleted the baloo/x509-cert/v3-default branch October 7, 2025 18:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant