aboutsummaryrefslogtreecommitdiffstats
path: root/test/v3_ca_exts.cnf
diff options
context:
space:
mode:
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>2020-12-12 21:36:06 +0100
committerDr. David von Oheimb <dev@ddvo.net>2021-01-20 15:53:47 +0100
commit9495cfbc22393aee87aa877e9e2e726c2cc441f1 (patch)
treebbfc5bb7754033278452d86521f7eb6e1316e09f /test/v3_ca_exts.cnf
parent3d63348a871d2319f7ff3512f97fd660fa7fadea (diff)
downloadopenssl-9495cfbc22393aee87aa877e9e2e726c2cc441f1.tar.gz
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13719)
Diffstat (limited to 'test/v3_ca_exts.cnf')
-rw-r--r--test/v3_ca_exts.cnf2
1 files changed, 1 insertions, 1 deletions
diff --git a/test/v3_ca_exts.cnf b/test/v3_ca_exts.cnf
index a6d3245fb4..3ad4cae8cc 100644
--- a/test/v3_ca_exts.cnf
+++ b/test/v3_ca_exts.cnf
@@ -1,4 +1,4 @@
-basicConstraints = CA:true
+basicConstraints = critical, CA:true
keyUsage = cRLSign, keyCertSign
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always