diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2005-09-16 11:58:28 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2005-09-16 11:58:28 +0000 |
| commit | 29b9763d9f50ddb6eddf6ffe5c40b6553faa1216 (patch) | |
| tree | 7f49fad85f0ea8d74b76ebe95c0dd5971d829e3e /apps/openssl.cnf | |
| parent | 270da80bfaa2babd2cd84c52cfd80617120de30e (diff) | |
| download | openssl-29b9763d9f50ddb6eddf6ffe5c40b6553faa1216.tar.gz | |
Change openssl.cnf to use UTF8Strings by default and not always include issuer
and serial versions of AKID.
Diffstat (limited to 'apps/openssl.cnf')
| -rw-r--r-- | apps/openssl.cnf | 11 |
1 files changed, 5 insertions, 6 deletions
diff --git a/apps/openssl.cnf b/apps/openssl.cnf index 04710f87d5..f58a30af43 100644 --- a/apps/openssl.cnf +++ b/apps/openssl.cnf @@ -110,13 +110,12 @@ x509_extensions = v3_ca # The extentions to add to the self signed cert # This sets a mask for permitted string types. There are several options. # default: PrintableString, T61String, BMPString. -# pkix : PrintableString, BMPString. -# utf8only: only UTF8Strings. +# pkix : PrintableString, BMPString (PKIX recommendation before 2004) +# utf8only: only UTF8Strings (PKIX recommendation after 2004). # nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). # MASK:XXXX a literal mask value. -# WARNING: current versions of Netscape crash on BMPStrings or UTF8Strings -# so use this option with caution! -string_mask = nombstr +# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings. +string_mask = utf8only # req_extensions = v3_req # The extensions to add to a certificate request @@ -188,7 +187,7 @@ nsComment = "OpenSSL Generated Certificate" # PKIX recommendations harmless if included in all certificates. subjectKeyIdentifier=hash -authorityKeyIdentifier=keyid,issuer:always +authorityKeyIdentifier=keyid,issuer # This stuff is for subjectAltName and issuerAltname. # Import the email address. |