unbork main??

This commit is contained in:
müde 2026-08-06 00:22:44 +02:00
commit 31e47632f4

View file

@ -270,8 +270,8 @@ in
# redundant — a DNS constraint says nothing about an # redundant — a DNS constraint says nothing about an
# iPAddress SAN, and an unconstrained name type is a name # iPAddress SAN, and an unconstrained name type is a name
# type this CA is unconstrained for. # type this CA is unconstrained for.
printf 'nameConstraints=critical,permitted;%s,excluded;IP:0.0.0.0/0.0.0.0,excluded;IP:0:0:0:0:0:0:0:0/0:0:0:0:0:0:0:0\n' \ printf 'nameConstraints=critical,%s,excluded;IP:0.0.0.0/0.0.0.0,excluded;IP:0:0:0:0:0:0:0:0/0:0:0:0:0:0:0:0\n' \
"$(echo "$want" | sed 's/^/DNS:/' | paste -sd, -)" "$(echo "$want" | sed 's/^/permitted;DNS:/' | paste -sd, -)"
} > "$ext" } > "$ext"
openssl x509 -req -in "$csr" -CA "$root" -CAkey "$rootk" \ openssl x509 -req -in "$csr" -CA "$root" -CAkey "$rootk" \