aboutsummaryrefslogtreecommitdiff
path: root/src/gns
diff options
context:
space:
mode:
authorChristian Grothoff <christian@grothoff.org>2021-04-27 23:29:48 +0200
committerMartin Schanzenbach <mschanzenbach@posteo.de>2021-04-28 10:25:39 +0200
commit1b87a306f0ec3da8bdb1907e2b4efb9e1b3cb9bd (patch)
treeb2c2e39f0815220bc8f23af2c97dbe4d4612ad0e /src/gns
parent5e347ac9df8b49503a1fdfa38707a99a6b2b3b0c (diff)
downloadgnunet-1b87a306f0ec3da8bdb1907e2b4efb9e1b3cb9bd.tar.gz
gnunet-1b87a306f0ec3da8bdb1907e2b4efb9e1b3cb9bd.zip
- fix misc typos
Diffstat (limited to 'src/gns')
-rw-r--r--src/gns/gnunet-gns-proxy-ca.template12
-rw-r--r--src/gns/openssl.cnf9
2 files changed, 10 insertions, 11 deletions
diff --git a/src/gns/gnunet-gns-proxy-ca.template b/src/gns/gnunet-gns-proxy-ca.template
index 541e3a355..b1a0d16fd 100644
--- a/src/gns/gnunet-gns-proxy-ca.template
+++ b/src/gns/gnunet-gns-proxy-ca.template
@@ -41,10 +41,10 @@ cn = "GNS Proxy CA"
41# An alternative way to set the certificate's distinguished name directly 41# An alternative way to set the certificate's distinguished name directly
42# is with the "dn" option. The attribute names allowed are: 42# is with the "dn" option. The attribute names allowed are:
43# C (country), street, O (organization), OU (unit), title, CN (common name), 43# C (country), street, O (organization), OU (unit), title, CN (common name),
44# L (locality), ST (state), placeOfBirth, gender, countryOfCitizenship, 44# L (locality), ST (state), placeOfBirth, gender, countryOfCitizenship,
45# countryOfResidence, serialNumber, telephoneNumber, surName, initials, 45# countryOfResidence, serialNumber, telephoneNumber, surName, initials,
46# generationQualifier, givenName, pseudonym, dnQualifier, postalCode, name, 46# generationQualifier, givenName, pseudonym, dnQualifier, postalCode, name,
47# businessCategory, DC, UID, jurisdictionOfIncorporationLocalityName, 47# businessCategory, DC, UID, jurisdictionOfIncorporationLocalityName,
48# jurisdictionOfIncorporationStateOrProvinceName, 48# jurisdictionOfIncorporationStateOrProvinceName,
49# jurisdictionOfIncorporationCountryName, XmppAddr, and numeric OIDs. 49# jurisdictionOfIncorporationCountryName, XmppAddr, and numeric OIDs.
50 50
@@ -59,7 +59,7 @@ cn = "GNS Proxy CA"
59# Use -1 if there is no expiration date. 59# Use -1 if there is no expiration date.
60expiration_days = 3650 60expiration_days = 3650
61 61
62# Alternatively you may set concrete dates and time. The GNU date string 62# Alternatively you may set concrete dates and time. The GNU date string
63# formats are accepted. See: 63# formats are accepted. See:
64# https://www.gnu.org/software/tar/manual/html_node/Date-input-formats.html 64# https://www.gnu.org/software/tar/manual/html_node/Date-input-formats.html
65 65
@@ -226,7 +226,7 @@ tls_www_server
226#honor_crq_ext = 2.5.29.17 226#honor_crq_ext = 2.5.29.17
227#honor_crq_ext = 2.5.29.15 227#honor_crq_ext = 2.5.29.15
228 228
229# Path length contraint. Sets the maximum number of 229# Path length constraint. Sets the maximum number of
230# certificates that can be used to certify this certificate. 230# certificates that can be used to certify this certificate.
231# (i.e. the certificate chain length) 231# (i.e. the certificate chain length)
232#path_len = -1 232#path_len = -1
diff --git a/src/gns/openssl.cnf b/src/gns/openssl.cnf
index 503460f9f..a2561b9b2 100644
--- a/src/gns/openssl.cnf
+++ b/src/gns/openssl.cnf
@@ -15,7 +15,7 @@ oid_section = new_oids
15# To use this configuration file with the "-extfile" option of the 15# To use this configuration file with the "-extfile" option of the
16# "openssl x509" utility, name here the section containing the 16# "openssl x509" utility, name here the section containing the
17# X.509v3 extensions to use: 17# X.509v3 extensions to use:
18# extensions = 18# extensions =
19# (Alternatively, use a configuration file that has only 19# (Alternatively, use a configuration file that has only
20# X.509v3 extensions in its main [= default] section.) 20# X.509v3 extensions in its main [= default] section.)
21 21
@@ -46,7 +46,7 @@ crl = $dir/crl.pem # The current CRL
46private_key = $dir/private/cakey.pem# The private key 46private_key = $dir/private/cakey.pem# The private key
47RANDFILE = $dir/private/.rand # private random number file 47RANDFILE = $dir/private/.rand # private random number file
48 48
49x509_extensions = usr_cert # The extentions to add to the cert 49x509_extensions = usr_cert # The extensions to add to the cert
50 50
51# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs 51# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
52# so this is commented out by default to leave a V1 CRL. 52# so this is commented out by default to leave a V1 CRL.
@@ -89,13 +89,13 @@ default_bits = 1024
89default_keyfile = privkey.pem 89default_keyfile = privkey.pem
90distinguished_name = req_distinguished_name 90distinguished_name = req_distinguished_name
91attributes = req_attributes 91attributes = req_attributes
92x509_extensions = v3_ca # The extentions to add to the self signed cert 92x509_extensions = v3_ca # The extensions to add to the self signed cert
93 93
94# Passwords for private keys if not present they will be prompted for 94# Passwords for private keys if not present they will be prompted for
95# input_password = secret 95# input_password = secret
96# output_password = secret 96# output_password = secret
97 97
98# This sets a mask for permitted string types. There are several options. 98# This sets a mask for permitted string types. There are several options.
99# default: PrintableString, T61String, BMPString. 99# default: PrintableString, T61String, BMPString.
100# pkix : PrintableString, BMPString. 100# pkix : PrintableString, BMPString.
101# utf8only: only UTF8Strings. 101# utf8only: only UTF8Strings.
@@ -242,4 +242,3 @@ basicConstraints = CA:true
242 242
243# issuerAltName=issuer:copy 243# issuerAltName=issuer:copy
244authorityKeyIdentifier=keyid:always,issuer:always 244authorityKeyIdentifier=keyid:always,issuer:always
245