Rework X.509 cert/csr/crl extension representation - #449

Open

cpu wants to merge 28 commits into

mainfrom

ci/rework-exts

Commits on Aug 29, 2026

ext: introduce module for X.509 extension writing
cpu
committed
4c9677b
ext: move subject alternative name writing
cpu
committed
650126f
ext: move key usage writing
cpu
committed
e9886b7
ext: move extended key usage writing
cpu
committed
c63bdfa
ext: move name constraints writing
cpu
committed
45a2e2b
ext: move CRL distribution points writing
cpu
committed
1eeb9be
ext: move subject key identifier writing
cpu
committed
413e30e
rcgen: bump version to 0.15.0
cpu
committed
cab08e1
lib: rename `BasicConstraints` to `PathLenConstraint`
cpu
committed
dcb1dab
ext: move basic constraints writing
cpu
committed
bc6f98d
ext: write custom extensions through the Extension trait
cpu
committed
bdecd36
ext: move CRL number and issuing distribution point writing
cpu
committed
55ae28b
ext: move CRL entry extension writing
cpu
committed
8816572
ext: add Extensions collection, build certificate extensions before writing
cpu
committed
3799391
csr: build extension request via Extensions collection
cpu
committed
a7c5d4a
crl: build CRL and entry extensions via Extensions collection
cpu
committed
8ecac99
ext: emit subject key identifier for all certificates
cpu
committed
ce8f70f
csr: align extension request order with certificate extensions
cpu
committed
e24ce9f
ext: move CustomExtension into the ext module
cpu
committed
6200093
ext: rework CustomExtension public API
cpu
committed
416161d
ext: add AcmeIdentifier, replacing CustomExtension::new_acme_identifier
cpu
committed
434cda8
csr: parse requested extensions via ext type constructors
cpu
committed
030a7aa
certificate: parse CA cert extensions via ext type constructors
cpu
committed
91325bc
certificate: add kitchen-sink extension round-trip test
cpu
committed
6f7fbff
csr: preserve unhandled requested extensions as custom extensions
cpu
committed
1284831
csr: reject duplicate requested extensions
cpu
committed
f1c5c84
certificate: reject duplicate extensions when parsing CA certs
cpu
committed
4c1633e
string: replace chunks_exact with as_chunks
cpu
committed
e9c60c6

Navigation Menu

Uh oh!

Rework X.509 cert/csr/crl extension representation - #449

Rework X.509 cert/csr/crl extension representation#449
cpu wants to merge 28 commits into
mainfrom
ci/rework-exts

Commits on Aug 29, 2026

ext: introduce module for X.509 extension writing

ext: move subject alternative name writing

ext: move key usage writing

ext: move extended key usage writing

ext: move name constraints writing

ext: move CRL distribution points writing

ext: move subject key identifier writing

rcgen: bump version to 0.15.0

lib: rename `BasicConstraints` to `PathLenConstraint`

ext: move basic constraints writing

ext: write custom extensions through the Extension trait

ext: move CRL number and issuing distribution point writing

ext: move CRL entry extension writing

ext: add Extensions collection, build certificate extensions before writing

csr: build extension request via Extensions collection

crl: build CRL and entry extensions via Extensions collection

ext: emit subject key identifier for all certificates

csr: align extension request order with certificate extensions

ext: move CustomExtension into the ext module

ext: rework CustomExtension public API

ext: add AcmeIdentifier, replacing CustomExtension::new_acme_identifier

csr: parse requested extensions via ext type constructors

certificate: parse CA cert extensions via ext type constructors

certificate: add kitchen-sink extension round-trip test

csr: preserve unhandled requested extensions as custom extensions

csr: reject duplicate requested extensions

certificate: reject duplicate extensions when parsing CA certs

string: replace chunks_exact with as_chunks