Skip to content

tls: Support to Validate ExtendedKeyUsage of TLS Server Certificate#907

Merged
bazsi merged 3 commits intoaxoflow:mainfrom
MrAnno:tls-extkeyuse
Jan 30, 2026
Merged

tls: Support to Validate ExtendedKeyUsage of TLS Server Certificate#907
bazsi merged 3 commits intoaxoflow:mainfrom
MrAnno:tls-extkeyuse

Conversation

@MrAnno
Copy link
Contributor

@MrAnno MrAnno commented Jan 16, 2026

@MrAnno MrAnno changed the title Tls extkeyuse tls: Support to Validate ExtendedKeyUsage of TLS Server Certificate Jan 16, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Jan 16, 2026

This Pull Request introduces config grammar changes

axoflow/54416fbf21d92dce04676ed16c028f8eb4b7377e -> MrAnno/tls-extkeyuse

Details
--- a/destination
+++ b/destination

 network(
     tls(
+        extended-key-usage-verify(<yesno>)
     )
 )

 syslog(
     tls(
+        extended-key-usage-verify(<yesno>)
     )
 )

 tcp(
     tls(
+        extended-key-usage-verify(<yesno>)
     )
 )

 tcp6(
     tls(
+        extended-key-usage-verify(<yesno>)
     )
 )

bazsi
bazsi previously approved these changes Jan 16, 2026
Copy link
Member

@bazsi bazsi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I hate how we decide whether a counter can be reset or not. But I understand that this is a patch port, and it doesn't make the existing situation much worse.

The x.509 part looks good to me as well.

Signed-off-by: László Várady <[email protected]>
@bazsi bazsi merged commit c79a2d6 into axoflow:main Jan 30, 2026
22 checks passed
fekete-robert pushed a commit to axoflow/axosyslog-core-docs that referenced this pull request Feb 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support to Validate ExtendedKeyUsage of TLS Server Certificate

3 participants