mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-20 22:21:09 +02:00
If a CSR contains a SAN of type otherName, encoded in UTF-8, and the signing role specifies use_csr_sans, the otherName SAN will be included in the signed cert's SAN extension. Allow single star in allowed_other_sans to match any OtherName. Update documentation to clarify globbing behaviour.