Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ceremony: Remove deprecated id-qt-cps support #7750

Merged
merged 1 commit into from
Oct 8, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 1 addition & 2 deletions cmd/ceremony/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -123,7 +123,6 @@ certificate-profile:
policies:
- oid: 1.2.3
- oid: 4.5.6
cps-uri: "http://example.com/cps"
key-usages:
- Digital Signature
- Cert Sign
Expand Down Expand Up @@ -420,5 +419,5 @@ The certificate profile defines a restricted set of fields that are used to gene
| `ocsp-url` | Specifies the AIA OCSP responder URL |
| `crl-url` | Specifies the cRLDistributionPoints URL |
| `issuer-url` | Specifies the AIA caIssuer URL |
| `policies` | Specifies contents of a certificatePolicies extension. Should contain a list of policies with the fields `oid`, indicating the policy OID, and a `cps-uri` field, containing the CPS URI to use, if the policy should contain a id-qt-cps qualifier. Only single CPS values are supported. |
| `policies` | Specifies contents of a certificatePolicies extension. Should contain a list of policies with the field `oid`, indicating the policy OID. |
| `key-usages` | Specifies list of key usage bits should be set, list can contain `Digital Signature`, `CRL Sign`, and `Cert Sign` |
3 changes: 0 additions & 3 deletions cmd/ceremony/cert.go
Original file line number Diff line number Diff line change
Expand Up @@ -17,9 +17,6 @@ import (

type policyInfoConfig struct {
OID string
// Deprecated: we do not include the id-qt-cps policy qualifier in our
// certificate policy extensions anymore.
CPSURI string `yaml:"cps-uri"`
}

// certProfile contains the information required to generate a certificate
Expand Down