Missing feature of tls authentication authorityKeyIdentifier

[mattiabertorello]

It would be good to implement the X509v3 Authority Key Identifier extension but should be optional to provide back compatibility.
The main reason are:

• Performance to find the right CA without try all of them
• Best practise
• Compatibility with CFSSL that generate the certificate with an subject id and consequently our go tool generate the client certificate with the authority key identifier

https://www.v13.gr/blog/?p=293

Thanks

[mattiabertorello]

Hi @sandeepmistry did you see the issue?

[sandeepmistry]

Can you please provide:

• an example cert we should use for the template
• if the value can be stored in the library or if we need to use a slot on the crypto chip to persist it

Will this be used on AWS IoT or our own broker?

We need to schedule this work based on the priorities of the other items I have on my list.

cc/ @akash73 @mastrolinux

[sandeepmistry]

Closed via #6.