Commit 1d326e9b authored by Adrien Dorsaz's avatar Adrien Dorsaz

csr: support SAN extension marked as "critical"

See: https://github.com/diafygi/acme-tiny/issues/216

Closes #9
parent e84912fd
......@@ -90,8 +90,9 @@ def get_crt(config, log=LOGGER):
common_name = re.search(r"Subject:.*?\s+?CN\s*?=\s*?([^\s,;/]+)", csr)
if common_name is not None:
domains.add(common_name.group(1))
subject_alt_names = re.search(r"X509v3 Subject Alternative Name: \r?\n +([^\r\n]+)\r?\n", csr,
re.MULTILINE | re.DOTALL)
subject_alt_names = re.search(
r"X509v3 Subject Alternative Name: (?:critical)?\r?\n +([^\r\n]+)\r?\n",
csr, re.MULTILINE)
if subject_alt_names is not None:
for san in subject_alt_names.group(1).split(", "):
if san.startswith("DNS:"):
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment