If a finalize CSR contains a SAN which looks like an IP address, don't actually include that CN in our IssuanceRequest, and don't promote any other SAN to be the CN either. This is similar to how we ignore the CSR's CN when it is too long. |
||
---|---|---|
.. | ||
csr.go | ||
csr_test.go |