letsencrypt
/
boulder
mirror of https://github.com/letsencrypt/boulder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

ceremony: Remove deprecated id-qt-cps support (#7750) 

Fixes #7726
This commit is contained in:
James Renken 2024-10-08 16:09:33 -04:00 committed by GitHub
parent a6dc97cb5b
commit 15c8752534
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
cmd/ceremony/README.md
View File

@ -123,7 +123,6 @@ certificate-profile:
policies: policies:
- oid: 1.2.3 - oid: 1.2.3
- oid: 4.5.6 - oid: 4.5.6
cps-uri: "http://example.com/cps"
key-usages: key-usages:
- Digital Signature - Digital Signature
- Cert Sign - Cert Sign
@ -420,5 +419,5 @@ The certificate profile defines a restricted set of fields that are used to gene
| `ocsp-url` | Specifies the AIA OCSP responder URL | | `ocsp-url` | Specifies the AIA OCSP responder URL |
| `crl-url` | Specifies the cRLDistributionPoints URL | | `crl-url` | Specifies the cRLDistributionPoints URL |
| `issuer-url` | Specifies the AIA caIssuer URL | | `issuer-url` | Specifies the AIA caIssuer URL |
| `policies` | Specifies contents of a certificatePolicies extension. Should contain a list of policies with the fields `oid`, indicating the policy OID, and a `cps-uri` field, containing the CPS URI to use, if the policy should contain a id-qt-cps qualifier. Only single CPS values are supported. | | `policies` | Specifies contents of a certificatePolicies extension. Should contain a list of policies with the field `oid`, indicating the policy OID. |
| `key-usages` | Specifies list of key usage bits should be set, list can contain `Digital Signature`, `CRL Sign`, and `Cert Sign` | | `key-usages` | Specifies list of key usage bits should be set, list can contain `Digital Signature`, `CRL Sign`, and `Cert Sign` |

3
cmd/ceremony/cert.go
View File

@ -17,9 +17,6 @@ import (
type policyInfoConfig struct { type policyInfoConfig struct {
OID string OID string
// Deprecated: we do not include the id-qt-cps policy qualifier in our
// certificate policy extensions anymore.
CPSURI string `yaml:"cps-uri"`
} }
// certProfile contains the information required to generate a certificate // certProfile contains the information required to generate a certificate