Skip to content

WCCE-RS: Specify default CSR subject DN - #5

Merged
lvkv merged 1 commit into
mainfrom
lvkv/wcce-rs/csr-default-dn
Oct 17, 2025
Merged

WCCE-RS: Specify default CSR subject DN#5
lvkv merged 1 commit into
mainfrom
lvkv/wcce-rs/csr-default-dn

Conversation

@lvkv

@lvkv lvkv commented Oct 15, 2025

Copy link
Copy Markdown
Member

wcce-rs currently doesn't support supplying a subject name in PKCS #10 certificate signing requests. This is because a large number of AD CS certificate templates instead supply that value using AD attributes—essentially discarding the value supplied by the CSR in the process (i.e., the template has Subject Name > Supply in the request unset).

Because of this, wcce-rs uses a placeholder subject name when serializing a CSR using the rustls/rcgen library. However, we don't override the default DN provided by the library, which leads to obviously incorrect certificate authority logs like this:

The request was for
               CN=rcgen self signed cert.

This PR updates the library and documentation to use a more sensible default.

wcce-rs should also grow support for supplying subject names in the request. I've created an issue for that over at #4.

@lvkv lvkv self-assigned this Oct 15, 2025
@lvkv
lvkv merged commit ecb13ee into main Oct 17, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant