[PR #657] Allow specifying X.509 nameConstraints #526

New issue

Open

opened 2026-02-25 22:33:46 +03:00 by kerem · 0 comments

kerem commented

2026-02-25 22:33:46 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/FiloSottile/mkcert/pull/657
Author: @WhyNotHugo
Created: 1/29/2026
Status: 🔄 Open

Base: master ← Head: name-constraints

📝 Commits (1)

08960a5 Allow specifying X.509 nameConstraints

📊 Changes

2 files changed (+20 additions, -12 deletions)

View changed files

📝 cert.go (+5 -0)
📝 main.go (+15 -12)

📄 Description

Implement a --nameConstraints flag, which adds X.509 nameConstraints so that the CA can only be used for the given domain names and no other domains.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/FiloSottile/mkcert/pull/657 **Author:** [@WhyNotHugo](https://github.com/WhyNotHugo) **Created:** 1/29/2026 **Status:** 🔄 Open **Base:** `master` ← **Head:** `name-constraints` --- ### 📝 Commits (1) - [`08960a5`](https://github.com/FiloSottile/mkcert/commit/08960a5cc6e8e5fe1a0a29a59e04b1fb2abe148d) Allow specifying X.509 nameConstraints ### 📊 Changes **2 files changed** (+20 additions, -12 deletions) <details> <summary>View changed files</summary> 📝 `cert.go` (+5 -0) 📝 `main.go` (+15 -12) </details> ### 📄 Description Implement a --nameConstraints flag, which adds X.509 nameConstraints so that the CA can only be used for the given domain names and no other domains. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>