From: Lukas Schauer <lukas@schauer.so>
Date: Fri, 18 Jan 2019 12:21:39 +0000 (+0100)
Subject: updated oid for tls-alpn verification token (fixes #624)
X-Git-Tag: v0.6.3~10
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=585ed5404bd8a89002ea9f250a24f075ddd52d6f;p=thirdparty%2Fdehydrated.git

updated oid for tls-alpn verification token (fixes #624)
---

diff --git a/dehydrated b/dehydrated
index bda6393..c4096b7 100755
--- a/dehydrated
+++ b/dehydrated
@@ -933,7 +933,7 @@ generate_alpn_certificate() {
   tmp_openssl_cnf="$(_mktemp)"
   cat "${OPENSSL_CNF}" > "${tmp_openssl_cnf}"
   printf "[SAN]\nsubjectAltName=DNS:%s\n" "${altname}" >> "${tmp_openssl_cnf}"
-  printf "1.3.6.1.5.5.7.1.30.1=critical,DER:04:20:${acmevalidation}\n" >> "${tmp_openssl_cnf}"
+  printf "1.3.6.1.5.5.7.1.31=critical,DER:04:20:${acmevalidation}\n" >> "${tmp_openssl_cnf}"
   SUBJ="/CN=${altname}/"
   [[ "${OSTYPE:0:5}" = "MINGW" ]] && SUBJ="/${SUBJ}"
   _openssl req -x509 -new -sha256 -nodes -newkey rsa:2048 -keyout "${alpncertdir}/${altname}.key.pem" -out "${alpncertdir}/${altname}.crt.pem" -subj "${SUBJ}" -extensions SAN -config "${tmp_openssl_cnf}"