pki --req --san add support for uri about strongswan HOT 5 CLOSED

Device identification. Each device should have a unique serial number. The request or certificate can then clearly confirm what device it is.
Unlike other types of SAN, this one will be permanent for the device.

from strongswan.

We need --san urn:dev:os:...
Am I right that identification_create_from_string(char *string) has to be patched?

from strongswan.

We could easily add this via an explicit prefix i.e. --san uri:... (see the 1983-uri-san branch). But such SANs would be completely useless in strongSwan, they would just be encoded in the certificates.

from strongswan.

We could easily add this via an explicit prefix i.e. --san uri:... (see the 1983-uri-san branch). But such SANs would be completely useless in strongSwan, they would just be encoded in the certificates.

Small commit but big step for secure IoT. :-)

from strongswan.

What's the use case for this exactly (and in particular in regards to IoT)?

from strongswan.