mirror of
https://github.com/hashicorp/vault.git
synced 2025-11-21 10:41:11 +01:00
If a CSR contains a SAN of type otherName, encoded in UTF-8, and the signing role specifies use_csr_sans, the otherName SAN will be included in the signed cert's SAN extension. Allow single star in allowed_other_sans to match any OtherName. Update documentation to clarify globbing behaviour.