summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authortb <>2023-09-26 21:18:01 +0000
committertb <>2023-09-26 21:18:01 +0000
commit72882765a38f31ef7380ef172db68383286dce75 (patch)
treefc2b478a503ad121129044ea65f905f05b82cacb /src
parentc47f546a7325c2f523da42a65c7d73218224ddcb (diff)
downloadopenbsd-72882765a38f31ef7380ef172db68383286dce75.tar.gz
openbsd-72882765a38f31ef7380ef172db68383286dce75.tar.bz2
openbsd-72882765a38f31ef7380ef172db68383286dce75.zip
Fix reference to x509v3.cnf(5) bis
Diffstat (limited to 'src')
-rw-r--r--src/regress/lib/libcrypto/CA/root.cnf12
1 files changed, 6 insertions, 6 deletions
diff --git a/src/regress/lib/libcrypto/CA/root.cnf b/src/regress/lib/libcrypto/CA/root.cnf
index 30a442f136..02399a0a3f 100644
--- a/src/regress/lib/libcrypto/CA/root.cnf
+++ b/src/regress/lib/libcrypto/CA/root.cnf
@@ -1,4 +1,4 @@
1# $OpenBSD: root.cnf,v 1.4 2022/03/14 21:30:48 tb Exp $ 1# $OpenBSD: root.cnf,v 1.5 2023/09/26 21:18:01 tb Exp $
2# For regression tests 2# For regression tests
3default_ca = CA_regress 3default_ca = CA_regress
4 4
@@ -83,14 +83,14 @@ emailAddress_default = evilsoandsos@openbsd.org
83commonName_default = Regress Root CA 83commonName_default = Regress Root CA
84 84
85[ v3_ca ] 85[ v3_ca ]
86# Extensions for a typical CA (`man x509v3_config`). 86# Extensions for a typical CA (`man x509v3.cnf`).
87subjectKeyIdentifier = hash 87subjectKeyIdentifier = hash
88authorityKeyIdentifier = keyid:always,issuer 88authorityKeyIdentifier = keyid:always,issuer
89basicConstraints = critical, CA:true 89basicConstraints = critical, CA:true
90keyUsage = critical, digitalSignature, cRLSign, keyCertSign 90keyUsage = critical, digitalSignature, cRLSign, keyCertSign
91 91
92[ v3_intermediate_ca ] 92[ v3_intermediate_ca ]
93# Extensions for a typical intermediate CA (`man x509v3_config`). 93# Extensions for a typical intermediate CA (`man x509v3.cnf`).
94subjectKeyIdentifier = hash 94subjectKeyIdentifier = hash
95authorityKeyIdentifier = keyid:always,issuer 95authorityKeyIdentifier = keyid:always,issuer
96basicConstraints = critical, CA:true, pathlen:0 96basicConstraints = critical, CA:true, pathlen:0
@@ -113,7 +113,7 @@ C = CA
113O = OpenBSD 113O = OpenBSD
114 114
115[ usr_cert ] 115[ usr_cert ]
116# Extensions for client certificates (`man x509v3_config`). 116# Extensions for client certificates (`man x509v3.cnf`).
117basicConstraints = CA:FALSE 117basicConstraints = CA:FALSE
118nsCertType = client, email 118nsCertType = client, email
119nsComment = "OpenSSL Generated Client Certificate" 119nsComment = "OpenSSL Generated Client Certificate"
@@ -123,7 +123,7 @@ keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment
123extendedKeyUsage = clientAuth, emailProtection 123extendedKeyUsage = clientAuth, emailProtection
124 124
125[ server_cert ] 125[ server_cert ]
126# Extensions for server certificates (`man x509v3_config`). 126# Extensions for server certificates (`man x509v3.cnf`).
127basicConstraints = CA:FALSE 127basicConstraints = CA:FALSE
128nsCertType = server 128nsCertType = server
129nsComment = "OpenSSL Generated Server Certificate" 129nsComment = "OpenSSL Generated Server Certificate"
@@ -133,7 +133,7 @@ keyUsage = critical, digitalSignature, keyEncipherment
133extendedKeyUsage = serverAuth 133extendedKeyUsage = serverAuth
134 134
135[ crl_ext ] 135[ crl_ext ]
136# Extension for CRLs (`man x509v3_config`). 136# Extension for CRLs (`man x509v3.cnf`).
137authorityKeyIdentifier=keyid:always 137authorityKeyIdentifier=keyid:always
138 138
139[ ocsp ] 139[ ocsp ]