{"action":"created","issue":{"url":"https://api.github.com/repos/opnsense/core/issues/2463","repository_url":"https://api.github.com/repos/opnsense/core","labels_url":"https://api.github.com/repos/opnsense/core/issues/2463/labels{/name}","comments_url":"https://api.github.com/repos/opnsense/core/issues/2463/comments","events_url":"https://api.github.com/repos/opnsense/core/issues/2463/events","html_url":"https://github.com/opnsense/core/pull/2463","id":332521174,"node_id":"MDExOlB1bGxSZXF1ZXN0MTk0OTg0NjYz","number":2463,"title":"Confirm KU/EKU for server certs","user":{"login":"whislock","id":12767509,"node_id":"MDQ6VXNlcjEyNzY3NTA5","avatar_url":"https://avatars2.githubusercontent.com/u/12767509?v=4","gravatar_id":"","url":"https://api.github.com/users/whislock","html_url":"https://github.com/whislock","followers_url":"https://api.github.com/users/whislock/followers","following_url":"https://api.github.com/users/whislock/following{/other_user}","gists_url":"https://api.github.com/users/whislock/gists{/gist_id}","starred_url":"https://api.github.com/users/whislock/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whislock/subscriptions","organizations_url":"https://api.github.com/users/whislock/orgs","repos_url":"https://api.github.com/users/whislock/repos","events_url":"https://api.github.com/users/whislock/events{/privacy}","received_events_url":"https://api.github.com/users/whislock/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-06-14T18:48:09Z","updated_at":"2018-06-15T10:42:00Z","closed_at":"2018-06-15T06:27:46Z","author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/opnsense/core/pulls/2463","html_url":"https://github.com/opnsense/core/pull/2463","diff_url":"https://github.com/opnsense/core/pull/2463.diff","patch_url":"https://github.com/opnsense/core/pull/2463.patch"},"body":"Addresses https://github.com/opnsense/core/issues/2459.\r\n\r\nServer certificates should have KU set to include \"Digital Signature\" and \"Key Encipherment,\" and EKU set to \"TLS Web Server Authentication.\"\r\n\r\nOpenVPN requires both KU and EKU set correctly to successfully validate if client is using remote-cert-tls server configuration parameter."},"comment":{"url":"https://api.github.com/repos/opnsense/core/issues/comments/397583679","html_url":"https://github.com/opnsense/core/pull/2463#issuecomment-397583679","issue_url":"https://api.github.com/repos/opnsense/core/issues/2463","id":397583679,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NzU4MzY3OQ==","user":{"login":"whislock","id":12767509,"node_id":"MDQ6VXNlcjEyNzY3NTA5","avatar_url":"https://avatars2.githubusercontent.com/u/12767509?v=4","gravatar_id":"","url":"https://api.github.com/users/whislock","html_url":"https://github.com/whislock","followers_url":"https://api.github.com/users/whislock/followers","following_url":"https://api.github.com/users/whislock/following{/other_user}","gists_url":"https://api.github.com/users/whislock/gists{/gist_id}","starred_url":"https://api.github.com/users/whislock/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whislock/subscriptions","organizations_url":"https://api.github.com/users/whislock/orgs","repos_url":"https://api.github.com/users/whislock/repos","events_url":"https://api.github.com/users/whislock/events{/privacy}","received_events_url":"https://api.github.com/users/whislock/received_events","type":"User","site_admin":false},"created_at":"2018-06-15T10:42:00Z","updated_at":"2018-06-15T10:42:00Z","author_association":"CONTRIBUTOR","body":"Wrote a stub PHP script that would call the function against an array of certificates with varying combinations of KU/EKU settings, and verified that each certificate was properly classified. I didn’t have a full development environment set up, so it’s possible that I flubbed copying the modified code back to GitHub. 😣 I won’t do that again. "}}
{"actor":{"display_login":"whislock"}}