diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 1999-01-25 01:09:21 +0000 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 1999-01-25 01:09:21 +0000 |
| commit | f317aa4c9cb03dd680247bdcf6a22c1b799890e7 (patch) | |
| tree | 8eb5c59eb4c833f0c9079d5b58782dd783ddb1e0 /apps/openssl.cnf | |
| parent | d0cc3d346001c181ef1f1aab986c4a3e6bd8624f (diff) | |
| download | openssl-f317aa4c9cb03dd680247bdcf6a22c1b799890e7.tar.gz | |
More X509 V3 stuff. Add support for extensions in the 'req' application
so that: openssl req -x509 -new -out cert.pem
will take extensions from openssl.cnf a sample for a CA is included.
Also change the directory order so pem is nearer the end. Otherwise 'make links'
wont work because pem.h can't be built.
Diffstat (limited to 'apps/openssl.cnf')
| -rw-r--r-- | apps/openssl.cnf | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/apps/openssl.cnf b/apps/openssl.cnf index c07083566f..fbc328fad4 100644 --- a/apps/openssl.cnf +++ b/apps/openssl.cnf @@ -63,6 +63,7 @@ default_bits = 1024 default_keyfile = privkey.pem distinguished_name = req_distinguished_name attributes = req_attributes +x509_extensions = v3_ca # The extentions to add to the cert [ req_distinguished_name ] countryName = Country Name (2 letter code) @@ -117,3 +118,11 @@ nsCertType = 0x40 #nsCertExt #nsDataType +[ v3_ca] + +# Extensions for a typical CA + +basicConstraints = CA:true +keyUsage = cRLSign, keyCertSign + + |