diff options
| author | Rob Austein <sra@hactrn.net> | 2008-10-24 21:51:17 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2008-10-24 21:51:17 +0000 |
| commit | e72d62d2b9a932cc908d563c64e6c008821bc807 (patch) | |
| tree | 6acf815b926ce750ccaf81aa12247468440fa968 | |
| parent | cffb7c3e07a85b16c441f3605fbd97fa2d870ecb (diff) | |
Add some of the other RPKI profile extensions, in particular an
example of a multi-URI CRLDP extension.
svn path=/openssl/tests/test.conf; revision=2027
| -rw-r--r-- | openssl/tests/test.conf | 27 |
1 files changed, 26 insertions, 1 deletions
diff --git a/openssl/tests/test.conf b/openssl/tests/test.conf index 161eb5be..e2dc5166 100644 --- a/openssl/tests/test.conf +++ b/openssl/tests/test.conf @@ -1,7 +1,8 @@ # $Id$ [ req ] -default_bits = 1024 +default_md = sha256 +default_bits = 2048 encrypt_key = no distinguished_name = req_dn x509_extensions = req_x509_ext @@ -21,6 +22,30 @@ emailAddress = sra@hactrn.net sbgp-autonomousSysNum = @asid_ext sbgp-ipAddrBlock = @addr_ext +basicConstraints = critical,CA:true +subjectKeyIdentifier = hash +keyUsage = critical,keyCertSign,cRLSign + +subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://example.org/foo/,1.3.6.1.5.5.7.48.10;URI:rsync://example.org/foo/bar.mnf + +#crlDistributionPoints = URI:rsync://example.org/foo/bar.crl +crlDistributionPoints = crldp_ext + +certificatePolicies = critical, @certificate_policy_ext + +[ crldp_ext ] + +fullname = @crldp_URIs + +[ crldp_URIs ] + +URI.0 = rsync://example.org/foo/bar.crl +URI.1 = rsync://example.org/foo/baz.crl + +[ certificate_policy_ext ] + +policyIdentifier = 1.3.6.1.5.5.7.14.2 + [ asid_ext ] AS.0 = 1 |