commit 8f368b0696e0c42c4eb1b9dafa89efc9d8fcfc6a
Merge: 7e6d972 efd588d
Author: Ben Hutchings <benh@debian.org>
Date: Sat Feb 21 19:42:08 2026 +0100
Merge branch 'cert-generation-for-autopkgtest' into 'debian/latest'
d/t/test-common: Move inclusion of extensions when signing the certificate
See merge request kernel-team/ktls-utils!3
commit efd588d3ad981d3ff12955e390e1e7b1c3a47b17
Author: Salvatore Bonaccorso <carnil@debian.org>
Date: Fri Feb 20 07:49:21 2026 +0100
d/t/test-common: Add inclusion of extensions when signing the certificates
When generating the certificate requests the req_extensions sections are
relevant, when creating and signing the certificate with the CA using
-x509 then x509_extensions is relevant. Add the passing of config to the
signing step as we want the certificate to contain the basicConstraints
with CA:false and extendedKeyUsage as well.
As per README.Debian the name(s) and purposes are ignore, but the
intention was to include them as set in the role specific openssl.cnf
configuration.
Among the 2 debian patches available in version 1.3.0-2 of the package, we noticed the following issues:
![[bug history graph]](https://qa.debian.org/data/bts/graphs/k/ktls-utils.png){kind=link}