diff options
author | miod <> | 2014-04-11 22:51:54 +0000 |
---|---|---|
committer | miod <> | 2014-04-11 22:51:54 +0000 |
commit | e4e5cfce71aea090d747d436ab48c4717f78c97c (patch) | |
tree | afd4b98775fa2752df82417abdf319a3af0bb439 /src/lib/libssl/x509v3.cnf | |
parent | 3c70ae462fc747402d562cd98a2825922441cdda (diff) | |
download | openbsd-e4e5cfce71aea090d747d436ab48c4717f78c97c.tar.gz openbsd-e4e5cfce71aea090d747d436ab48c4717f78c97c.tar.bz2 openbsd-e4e5cfce71aea090d747d436ab48c4717f78c97c.zip |
Move build machinery for libcrypto from libssl/crypto to libcrypto, as well
as configuration files; split manpages and .pc files between libcrypto and
libssl.
No functional change, only there to make engineering easier, and libcrypto
sources are still found in libssl/src/crypto at the moment.
ok reyk@, also discussed with deraadt@ beck@ and the usual crypto suspects.
Diffstat (limited to 'src/lib/libssl/x509v3.cnf')
-rw-r--r-- | src/lib/libssl/x509v3.cnf | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/src/lib/libssl/x509v3.cnf b/src/lib/libssl/x509v3.cnf deleted file mode 100644 index 8c6b775da1..0000000000 --- a/src/lib/libssl/x509v3.cnf +++ /dev/null | |||
@@ -1,29 +0,0 @@ | |||
1 | # default settings | ||
2 | CERTPATHLEN = 1 | ||
3 | CERTUSAGE = digitalSignature,keyCertSign,cRLSign | ||
4 | EXTCERTUSAGE = serverAuth,clientAuth | ||
5 | CERTIP = 0.0.0.0 | ||
6 | CERTFQDN = nohost.nodomain | ||
7 | |||
8 | # This section should be referenced when building an x509v3 CA | ||
9 | # Certificate. | ||
10 | # The default path length and the key usage can be overriden | ||
11 | # modified by setting the CERTPATHLEN and CERTUSAGE environment | ||
12 | # variables. | ||
13 | [x509v3_CA] | ||
14 | basicConstraints=critical,CA:true,pathlen:$ENV::CERTPATHLEN | ||
15 | keyUsage=$ENV::CERTUSAGE | ||
16 | |||
17 | # This section should be referenced to add an IP Address | ||
18 | # as an alternate subject name, needed by isakmpd | ||
19 | # The address must be provided in the CERTIP environment variable | ||
20 | [x509v3_IPAddr] | ||
21 | subjectAltName=IP:$ENV::CERTIP | ||
22 | extendedKeyUsage=$ENV::EXTCERTUSAGE | ||
23 | |||
24 | # This section should be referenced to add a FQDN hostname | ||
25 | # as an alternate subject name, needed by isakmpd | ||
26 | # The address must be provided in the CERTFQDN environment variable | ||
27 | [x509v3_FQDN] | ||
28 | subjectAltName=DNS:$ENV::CERTFQDN | ||
29 | extendedKeyUsage=$ENV::EXTCERTUSAGE | ||