diff options
Diffstat (limited to 'src/gns/openssl.cnf')
-rw-r--r-- | src/gns/openssl.cnf | 9 |
1 files changed, 4 insertions, 5 deletions
diff --git a/src/gns/openssl.cnf b/src/gns/openssl.cnf index 503460f9f..a2561b9b2 100644 --- a/src/gns/openssl.cnf +++ b/src/gns/openssl.cnf | |||
@@ -15,7 +15,7 @@ oid_section = new_oids | |||
15 | # To use this configuration file with the "-extfile" option of the | 15 | # To use this configuration file with the "-extfile" option of the |
16 | # "openssl x509" utility, name here the section containing the | 16 | # "openssl x509" utility, name here the section containing the |
17 | # X.509v3 extensions to use: | 17 | # X.509v3 extensions to use: |
18 | # extensions = | 18 | # extensions = |
19 | # (Alternatively, use a configuration file that has only | 19 | # (Alternatively, use a configuration file that has only |
20 | # X.509v3 extensions in its main [= default] section.) | 20 | # X.509v3 extensions in its main [= default] section.) |
21 | 21 | ||
@@ -46,7 +46,7 @@ crl = $dir/crl.pem # The current CRL | |||
46 | private_key = $dir/private/cakey.pem# The private key | 46 | private_key = $dir/private/cakey.pem# The private key |
47 | RANDFILE = $dir/private/.rand # private random number file | 47 | RANDFILE = $dir/private/.rand # private random number file |
48 | 48 | ||
49 | x509_extensions = usr_cert # The extentions to add to the cert | 49 | x509_extensions = usr_cert # The extensions to add to the cert |
50 | 50 | ||
51 | # Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs | 51 | # Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs |
52 | # so this is commented out by default to leave a V1 CRL. | 52 | # so this is commented out by default to leave a V1 CRL. |
@@ -89,13 +89,13 @@ default_bits = 1024 | |||
89 | default_keyfile = privkey.pem | 89 | default_keyfile = privkey.pem |
90 | distinguished_name = req_distinguished_name | 90 | distinguished_name = req_distinguished_name |
91 | attributes = req_attributes | 91 | attributes = req_attributes |
92 | x509_extensions = v3_ca # The extentions to add to the self signed cert | 92 | x509_extensions = v3_ca # The extensions to add to the self signed cert |
93 | 93 | ||
94 | # Passwords for private keys if not present they will be prompted for | 94 | # Passwords for private keys if not present they will be prompted for |
95 | # input_password = secret | 95 | # input_password = secret |
96 | # output_password = secret | 96 | # output_password = secret |
97 | 97 | ||
98 | # This sets a mask for permitted string types. There are several options. | 98 | # This sets a mask for permitted string types. There are several options. |
99 | # default: PrintableString, T61String, BMPString. | 99 | # default: PrintableString, T61String, BMPString. |
100 | # pkix : PrintableString, BMPString. | 100 | # pkix : PrintableString, BMPString. |
101 | # utf8only: only UTF8Strings. | 101 | # utf8only: only UTF8Strings. |
@@ -242,4 +242,3 @@ basicConstraints = CA:true | |||
242 | 242 | ||
243 | # issuerAltName=issuer:copy | 243 | # issuerAltName=issuer:copy |
244 | authorityKeyIdentifier=keyid:always,issuer:always | 244 | authorityKeyIdentifier=keyid:always,issuer:always |
245 | |||