-
Notifications
You must be signed in to change notification settings - Fork 22
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use certificate serial number in Subject Name #332
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM when the indentation issue has been fixed.
@mfoltzgoogle PTAL? |
This resolves the circular dependency in agent certificate fingerprint. Resolves w3c#276
TODO:
|
I updated the PR based on our discussion from TPAC with a slight adjustment. I retained the counter in the agent serial number to make it easier to implement certificate rotation in the future (it won't require the agent to generate a new UUID). PTAL @backkem |
Looks good to me. It addresses both the circularity and SNI issue. (I can't add a review, maybe because I opened the PR.) Thanks for picking this up Mark. Sorry I didn't find the time yet. |
Thanks. I am going to revert the SVG changes and submit them separately, as the SVG needs to be updated to reflect the updated PR. |
SHA: e3eace3 Reason: push, by markafoltz Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
SHA: e3eace3 Reason: push, by markafoltz Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
SHA: e3eace3 Reason: push, by markafoltz Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
This resolves the circular dependency in agent certificate fingerprint.
Resolves #276
Preview | Diff