diff options
| author | cloder <> | 2007-03-28 20:57:30 +0000 |
|---|---|---|
| committer | cloder <> | 2007-03-28 20:57:30 +0000 |
| commit | 36488448c3ca3d9f15fafdf14791736a99d87384 (patch) | |
| tree | b52033ee272d830599cb470fe7ff2da986ce1fbe | |
| parent | 714f67162a49eb27e900c3bb551b9d36abe03b18 (diff) | |
| download | openbsd-36488448c3ca3d9f15fafdf14791736a99d87384.tar.gz openbsd-36488448c3ca3d9f15fafdf14791736a99d87384.tar.bz2 openbsd-36488448c3ca3d9f15fafdf14791736a99d87384.zip | |
Add the cRLSign bit by default, so that certs generated using this file
will be able to sign CRLs.
OK reyk, hshoexer, millert
| -rw-r--r-- | src/lib/libssl/x509v3.cnf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/libssl/x509v3.cnf b/src/lib/libssl/x509v3.cnf index e430088671..5835534b96 100644 --- a/src/lib/libssl/x509v3.cnf +++ b/src/lib/libssl/x509v3.cnf | |||
| @@ -1,6 +1,6 @@ | |||
| 1 | # default settings | 1 | # default settings |
| 2 | CERTPATHLEN = 1 | 2 | CERTPATHLEN = 1 |
| 3 | CERTUSAGE = digitalSignature,keyCertSign | 3 | CERTUSAGE = digitalSignature,keyCertSign,cRLSign |
| 4 | CERTIP = 0.0.0.0 | 4 | CERTIP = 0.0.0.0 |
| 5 | CERTFQDN = nohost.nodomain | 5 | CERTFQDN = nohost.nodomain |
| 6 | 6 | ||