diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/regress/lib/libcrypto/CA/intermediate.cnf | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/src/regress/lib/libcrypto/CA/intermediate.cnf b/src/regress/lib/libcrypto/CA/intermediate.cnf index d0057ca13f..190460fe1a 100644 --- a/src/regress/lib/libcrypto/CA/intermediate.cnf +++ b/src/regress/lib/libcrypto/CA/intermediate.cnf | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | # $OpenBSD: intermediate.cnf,v 1.4 2022/03/14 21:30:48 tb Exp $ | 1 | # $OpenBSD: intermediate.cnf,v 1.5 2023/09/26 21:17:03 tb Exp $ |
| 2 | # For regression tests | 2 | # For regression tests |
| 3 | default_ca = CA_regress | 3 | default_ca = CA_regress |
| 4 | 4 | ||
| @@ -83,21 +83,21 @@ emailAddress_default = evilsoandsos@openbsd.org | |||
| 83 | commonName_default = Regress Intermediate CA | 83 | commonName_default = Regress Intermediate CA |
| 84 | 84 | ||
| 85 | [ v3_ca ] | 85 | [ v3_ca ] |
| 86 | # Extensions for a typical CA (`man x509v3_config`). | 86 | # Extensions for a typical CA (`man x509v3.cnf`). |
| 87 | subjectKeyIdentifier = hash | 87 | subjectKeyIdentifier = hash |
| 88 | authorityKeyIdentifier = keyid:always,issuer | 88 | authorityKeyIdentifier = keyid:always,issuer |
| 89 | basicConstraints = critical, CA:true | 89 | basicConstraints = critical, CA:true |
| 90 | keyUsage = critical, digitalSignature, cRLSign, keyCertSign | 90 | keyUsage = critical, digitalSignature, cRLSign, keyCertSign |
| 91 | 91 | ||
| 92 | [ v3_intermediate_ca ] | 92 | [ v3_intermediate_ca ] |
| 93 | # Extensions for a typical intermediate CA (`man x509v3_config`). | 93 | # Extensions for a typical intermediate CA (`man x509v3.cnf`). |
| 94 | subjectKeyIdentifier = hash | 94 | subjectKeyIdentifier = hash |
| 95 | authorityKeyIdentifier = keyid:always,issuer | 95 | authorityKeyIdentifier = keyid:always,issuer |
| 96 | basicConstraints = critical, CA:true, pathlen:0 | 96 | basicConstraints = critical, CA:true, pathlen:0 |
| 97 | keyUsage = critical, digitalSignature, cRLSign, keyCertSign | 97 | keyUsage = critical, digitalSignature, cRLSign, keyCertSign |
| 98 | 98 | ||
| 99 | [ usr_cert ] | 99 | [ usr_cert ] |
| 100 | # Extensions for client certificates (`man x509v3_config`). | 100 | # Extensions for client certificates (`man x509v3.cnf`). |
| 101 | basicConstraints = CA:FALSE | 101 | basicConstraints = CA:FALSE |
| 102 | nsCertType = client, email | 102 | nsCertType = client, email |
| 103 | nsComment = "OpenSSL Generated Client Certificate" | 103 | nsComment = "OpenSSL Generated Client Certificate" |
| @@ -111,7 +111,7 @@ subjectAltName = critical, @usr_san | |||
| 111 | email.0 = evilsoandsos@test.openbsd.org | 111 | email.0 = evilsoandsos@test.openbsd.org |
| 112 | 112 | ||
| 113 | [ server_cert ] | 113 | [ server_cert ] |
| 114 | # Extensions for server certificates (`man x509v3_config`). | 114 | # Extensions for server certificates (`man x509v3.cnf`). |
| 115 | basicConstraints = CA:FALSE | 115 | basicConstraints = CA:FALSE |
| 116 | nsCertType = server | 116 | nsCertType = server |
| 117 | nsComment = "OpenSSL Generated Server Certificate" | 117 | nsComment = "OpenSSL Generated Server Certificate" |
| @@ -121,7 +121,7 @@ keyUsage = critical, digitalSignature, keyEncipherment | |||
| 121 | extendedKeyUsage = serverAuth | 121 | extendedKeyUsage = serverAuth |
| 122 | 122 | ||
| 123 | [ crl_ext ] | 123 | [ crl_ext ] |
| 124 | # Extension for CRLs (`man x509v3_config`). | 124 | # Extension for CRLs (`man x509v3.cnf`). |
| 125 | authorityKeyIdentifier=keyid:always | 125 | authorityKeyIdentifier=keyid:always |
| 126 | 126 | ||
| 127 | [ ocsp ] | 127 | [ ocsp ] |
