From 36488448c3ca3d9f15fafdf14791736a99d87384 Mon Sep 17 00:00:00 2001
From: cloder <>
Date: Wed, 28 Mar 2007 20:57:30 +0000
Subject: Add the cRLSign bit by default, so that certs generated using this
 file will be able to sign CRLs.

OK reyk, hshoexer, millert
---
 src/lib/libssl/x509v3.cnf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/libssl/x509v3.cnf b/src/lib/libssl/x509v3.cnf
index e430088671..5835534b96 100644
--- a/src/lib/libssl/x509v3.cnf
+++ b/src/lib/libssl/x509v3.cnf
@@ -1,6 +1,6 @@
 # default settings
 CERTPATHLEN		= 1
-CERTUSAGE		= digitalSignature,keyCertSign
+CERTUSAGE		= digitalSignature,keyCertSign,cRLSign
 CERTIP			= 0.0.0.0
 CERTFQDN		= nohost.nodomain
 
-- 
cgit v1.2.3-55-g6feb