- Support ECDSA (P-256/prime256v1) and EdDSA (Ed25519) keys by setting to
CA_KEY_TYPE
environment variable to eitherECDSA
orEdDSA
- add name to sAN (DNSNames) for server certificates as well
- make CN of CA configurable through
-name
option when generating a CA - change CLI parameters, now an explicit
-name
is required for-server
and-client
, optional for-init-ca
- default CN of CA changed to "Root CA"
- the
-init
option is renamed to-init-ca
- remove
-ca-dir
option, useCA_DIR
environment variable now
- update
Makefile
to supportinstall
- make sure issued certificates never outlive the CA (#6)
- allow specifying
CA
as a value for-not-after
to explicitly let the certificate expire at the same time as the CA (#7) - server and client certificates now expire after 1 year by default (instead of together with the CA and 90 days respectively)
- initial release