CAcert Code Development list.

[David McIlwraith <archaios AT cacert.org>]

Hi all,

Sorry, I noticed that one myself and forgot to file a bug report. I'm 
not entirely sure why OpenSSL doesn't recognise a keyUsage constraint 
after extendedKeyUsage; that in and of itself is a bug in upstream. I'll 
see if I can trace it...

Regards,
- David McIlwraith 
<archaios AT cacert.org>

On 25/07/12 08:07, Michael Tänzer wrote:
> Hi folks,
>
> We have a fix for https://bugs.cacert.org/view.php?id=540
> "No key usage attribute in cacert org certs anymore?"
>
> The fix was reviewed by Dirk Astrath (dastrath) and me (NEOatNHNG) and
> tested by Ulrich Schröter (Uli60), Daniel Wagner (Kwaxi), Marcus Mängel
> (INOPIAE) and Kenneth Van Wyk.
>
> Diff is attached (bug-540.diff). Please also run the locale makefile so
> that our
> translators see the new strings (if present) on
> https://translations.cacert.org and new translations get imported into
> the system.
>
>
> The patch also needs to be applied to the signing server and
> additionally the changes found in the svn_bug-540.diff need to be
> applied to the openssl config files on the signer.
>
>
> Changed files:
> CommModule/server.pl
> www/policy/CertificationPracticeStatement.php

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature