aboutsummaryrefslogtreecommitdiff
path: root/src/gns/openssl.cnf
diff options
context:
space:
mode:
Diffstat (limited to 'src/gns/openssl.cnf')
-rw-r--r--src/gns/openssl.cnf9
1 files changed, 4 insertions, 5 deletions
diff --git a/src/gns/openssl.cnf b/src/gns/openssl.cnf
index 503460f9f..a2561b9b2 100644
--- a/src/gns/openssl.cnf
+++ b/src/gns/openssl.cnf
@@ -15,7 +15,7 @@ oid_section = new_oids
15# To use this configuration file with the "-extfile" option of the 15# To use this configuration file with the "-extfile" option of the
16# "openssl x509" utility, name here the section containing the 16# "openssl x509" utility, name here the section containing the
17# X.509v3 extensions to use: 17# X.509v3 extensions to use:
18# extensions = 18# extensions =
19# (Alternatively, use a configuration file that has only 19# (Alternatively, use a configuration file that has only
20# X.509v3 extensions in its main [= default] section.) 20# X.509v3 extensions in its main [= default] section.)
21 21
@@ -46,7 +46,7 @@ crl = $dir/crl.pem # The current CRL
46private_key = $dir/private/cakey.pem# The private key 46private_key = $dir/private/cakey.pem# The private key
47RANDFILE = $dir/private/.rand # private random number file 47RANDFILE = $dir/private/.rand # private random number file
48 48
49x509_extensions = usr_cert # The extentions to add to the cert 49x509_extensions = usr_cert # The extensions to add to the cert
50 50
51# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs 51# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
52# so this is commented out by default to leave a V1 CRL. 52# so this is commented out by default to leave a V1 CRL.
@@ -89,13 +89,13 @@ default_bits = 1024
89default_keyfile = privkey.pem 89default_keyfile = privkey.pem
90distinguished_name = req_distinguished_name 90distinguished_name = req_distinguished_name
91attributes = req_attributes 91attributes = req_attributes
92x509_extensions = v3_ca # The extentions to add to the self signed cert 92x509_extensions = v3_ca # The extensions to add to the self signed cert
93 93
94# Passwords for private keys if not present they will be prompted for 94# Passwords for private keys if not present they will be prompted for
95# input_password = secret 95# input_password = secret
96# output_password = secret 96# output_password = secret
97 97
98# This sets a mask for permitted string types. There are several options. 98# This sets a mask for permitted string types. There are several options.
99# default: PrintableString, T61String, BMPString. 99# default: PrintableString, T61String, BMPString.
100# pkix : PrintableString, BMPString. 100# pkix : PrintableString, BMPString.
101# utf8only: only UTF8Strings. 101# utf8only: only UTF8Strings.
@@ -242,4 +242,3 @@ basicConstraints = CA:true
242 242
243# issuerAltName=issuer:copy 243# issuerAltName=issuer:copy
244authorityKeyIdentifier=keyid:always,issuer:always 244authorityKeyIdentifier=keyid:always,issuer:always
245