From a724ca91d1596624ce3e51d9ee809e2e001dd136 Mon Sep 17 00:00:00 2001
From: Richard T Bonhomme <tincantech@protonmail.com>
Date: Mon, 1 May 2023 21:17:48 +0100
Subject: [PATCH] sign-req: Require confirm use of deprecated Netscape
 extensions

Signed-off-by: Richard T Bonhomme <tincantech@protonmail.com>
---
 easyrsa3/easyrsa | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index 4093fbe..e72f3e3 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -2084,6 +2084,15 @@ ${valid_period}:
 $(display_dn req "$req_in")
 "	# => confirm end
 
+		# Confirm deprecated use of NS extensions
+		case "$EASYRSA_NS_SUPPORT" in
+		[yY][eE][sS])
+			confirm "Confirm use of Netscape extensions: " yes \
+			"WARNING: Netscape extensions are DEPRECATED!"
+		;;
+		*) : #ok
+		esac
+
 	# Assign temp cert file
 	crt_out_tmp=""
 	easyrsa_mktemp crt_out_tmp || \