aboutsummaryrefslogtreecommitdiffstats
path: root/doc
diff options
context:
space:
mode:
authorRich Salz <rsalz@openssl.org>2016-06-12 22:21:54 -0400
committerRich Salz <rsalz@openssl.org>2016-06-13 09:18:22 -0400
commita7be5759cf9d8e2bf7c1ecd0efa2d53aae9ab706 (patch)
treead030fac8b3b0582d0dd76e16dfe5cd2158ba5e0 /doc
parent7d6284057b66458f6c99bd65ba67377d63411090 (diff)
downloadopenssl-a7be5759cf9d8e2bf7c1ecd0efa2d53aae9ab706.tar.gz
RT3809: basicConstraints is critical
This is really a security bugfix, not enhancement any more. Everyone knows critical extensions. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Diffstat (limited to 'doc')
-rw-r--r--doc/apps/req.pod2
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/apps/req.pod b/doc/apps/req.pod
index a891c3eeef..299d092799 100644
--- a/doc/apps/req.pod
+++ b/doc/apps/req.pod
@@ -543,7 +543,7 @@ Sample configuration file prompting for field values:
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
- basicConstraints = CA:true
+ basicConstraints = critical, CA:true
Sample configuration containing all field values: