linkerd2/pkg/identity
Tarun Pothulapati b389054d53
cli: Don't check for SAN in root and intermediate certs (#5237)
As discussed in #5228, it is not correct for root and intermediate
certs to have SAN. This PR updates the check to not verify the
intermediate issuer cert with the identity dns name (which checks with
SAN and not CN as the the `verify` func is used to verify leaf certs and
not root and intermediate certs). This PR also avoids setting a SAN
field when generating certs in the `install` command.

Fixes #5228
2020-11-18 15:30:39 -08:00
..
service.go cli: Don't check for SAN in root and intermediate certs (#5237) 2020-11-18 15:30:39 -08:00
service_test.go Spelling (#4872) 2020-08-12 21:59:50 -07:00