keygen: openssl.conf cleanup
This commit is contained in:
parent
2c48dd04e1
commit
337b2d4be3
@ -1,18 +1,13 @@
|
|||||||
[req]
|
[req]
|
||||||
distinguished_name = req_distinguished_name
|
distinguished_name = req_distinguished_name
|
||||||
x509_extensions = v3_ca # The extentions to add to the self signed cert
|
# The extensions to add to the self signed cert
|
||||||
|
x509_extensions = v3_ca
|
||||||
|
|
||||||
[req_distinguished_name]
|
[req_distinguished_name]
|
||||||
|
|
||||||
[v3_ca]
|
[v3_ca]
|
||||||
|
# Extensions for a typical CA - PKIX recommendation.
|
||||||
# Extensions for a typical CA
|
|
||||||
|
|
||||||
|
|
||||||
# PKIX recommendation.
|
|
||||||
|
|
||||||
subjectKeyIdentifier = hash
|
subjectKeyIdentifier = hash
|
||||||
|
|
||||||
authorityKeyIdentifier = keyid:always, issuer
|
authorityKeyIdentifier = keyid:always, issuer
|
||||||
|
|
||||||
# This is what PKIX recommends but some broken software chokes on critical
|
# This is what PKIX recommends but some broken software chokes on critical
|
||||||
@ -34,7 +29,7 @@ basicConstraints = CA:true
|
|||||||
# Copy issuer details
|
# Copy issuer details
|
||||||
#issuerAltName = issuer:copy
|
#issuerAltName = issuer:copy
|
||||||
|
|
||||||
# DER hex encoding of an extension: beware experts only!
|
# DER hex encoding of an extension: experts only!
|
||||||
#obj = DER:02:03
|
#obj = DER:02:03
|
||||||
# Where 'obj' is a standard or added object
|
# Where 'obj' is a standard or added object
|
||||||
# You can even override a supported extension:
|
# You can even override a supported extension:
|
||||||
|
Loading…
Reference in New Issue
Block a user