Confirmed users, Administrators
5,526
edits
SecurityEngineering/mozpkix-testing: Difference between revisions
m
→Behavior Changes
| Line 82: | Line 82: | ||
# End-entity certificates are no longer allowed to include the OCSPSigning EKU. | # End-entity certificates are no longer allowed to include the OCSPSigning EKU. | ||
# Intermediate certificates that contain the EKU extension now are required to assert either the serverAuth bit or the Netscape Server Gated Crypto bit (support for NSGC is provided temporarily for backward compatibility). | # Intermediate certificates that contain the EKU extension now are required to assert either the serverAuth bit or the Netscape Server Gated Crypto bit (support for NSGC is provided temporarily for backward compatibility). | ||
= Things for CAs to Fix = | = Things for CAs to Fix = | ||