summaryrefslogtreecommitdiff
path: root/src/lib/libssl/x509v3.cnf
diff options
context:
space:
mode:
authormiod <>2014-04-11 22:51:54 +0000
committermiod <>2014-04-11 22:51:54 +0000
commite4e5cfce71aea090d747d436ab48c4717f78c97c (patch)
treeafd4b98775fa2752df82417abdf319a3af0bb439 /src/lib/libssl/x509v3.cnf
parent3c70ae462fc747402d562cd98a2825922441cdda (diff)
downloadopenbsd-e4e5cfce71aea090d747d436ab48c4717f78c97c.tar.gz
openbsd-e4e5cfce71aea090d747d436ab48c4717f78c97c.tar.bz2
openbsd-e4e5cfce71aea090d747d436ab48c4717f78c97c.zip
Move build machinery for libcrypto from libssl/crypto to libcrypto, as well
as configuration files; split manpages and .pc files between libcrypto and libssl. No functional change, only there to make engineering easier, and libcrypto sources are still found in libssl/src/crypto at the moment. ok reyk@, also discussed with deraadt@ beck@ and the usual crypto suspects.
Diffstat (limited to 'src/lib/libssl/x509v3.cnf')
-rw-r--r--src/lib/libssl/x509v3.cnf29
1 files changed, 0 insertions, 29 deletions
diff --git a/src/lib/libssl/x509v3.cnf b/src/lib/libssl/x509v3.cnf
deleted file mode 100644
index 8c6b775da1..0000000000
--- a/src/lib/libssl/x509v3.cnf
+++ /dev/null
@@ -1,29 +0,0 @@
1# default settings
2CERTPATHLEN = 1
3CERTUSAGE = digitalSignature,keyCertSign,cRLSign
4EXTCERTUSAGE = serverAuth,clientAuth
5CERTIP = 0.0.0.0
6CERTFQDN = nohost.nodomain
7
8# This section should be referenced when building an x509v3 CA
9# Certificate.
10# The default path length and the key usage can be overriden
11# modified by setting the CERTPATHLEN and CERTUSAGE environment
12# variables.
13[x509v3_CA]
14basicConstraints=critical,CA:true,pathlen:$ENV::CERTPATHLEN
15keyUsage=$ENV::CERTUSAGE
16
17# This section should be referenced to add an IP Address
18# as an alternate subject name, needed by isakmpd
19# The address must be provided in the CERTIP environment variable
20[x509v3_IPAddr]
21subjectAltName=IP:$ENV::CERTIP
22extendedKeyUsage=$ENV::EXTCERTUSAGE
23
24# This section should be referenced to add a FQDN hostname
25# as an alternate subject name, needed by isakmpd
26# The address must be provided in the CERTFQDN environment variable
27[x509v3_FQDN]
28subjectAltName=DNS:$ENV::CERTFQDN
29extendedKeyUsage=$ENV::EXTCERTUSAGE