Branch: refs/heads/master Home: https://github.com/tribe29/checkmk Commit: 76cf17a06aec1fbd41998975cd32d7f21b4236f3 https://github.com/tribe29/checkmk/commit/76cf17a06aec1fbd41998975cd32d7f21… Author: Andreas Umbreit <andreas.umbreit(a)tribe29.com> Date: 2021-11-10 (Wed, 10 Nov 2021) Changed paths: M cmk/utils/certs.py Log Message: ----------- utils/certs.py: Provide required extensions for signed certs For usage as an end entity certificate, a x509 certificate must provide the CN as a SAN-entry, and have the ca=False BaseConstraint set. At least, this is enforced by rustls Change-Id: Ibc5b402db9b957b6e33a3170d772a05010ef36fe