diff options
| author | Rob Austein <sra@hactrn.net> | 2007-08-10 01:17:06 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2007-08-10 01:17:06 +0000 |
| commit | cd0806578e330537a091f1f314b2ba2606f424a6 (patch) | |
| tree | 1cce302ae0de9f6737580eb5653b8f433e1a5e49 /scripts/resource-cert-samples/ISP5c.cnf | |
| parent | 02fea13d6241956f775e684d327600fadadd45ca (diff) | |
Another whack at fixing sample certs.
svn path=/scripts/generate-testrepo.py; revision=854
Diffstat (limited to 'scripts/resource-cert-samples/ISP5c.cnf')
| -rw-r--r-- | scripts/resource-cert-samples/ISP5c.cnf | 19 |
1 files changed, 16 insertions, 3 deletions
diff --git a/scripts/resource-cert-samples/ISP5c.cnf b/scripts/resource-cert-samples/ISP5c.cnf index c1f892c2..cc689a77 100644 --- a/scripts/resource-cert-samples/ISP5c.cnf +++ b/scripts/resource-cert-samples/ISP5c.cnf @@ -13,11 +13,13 @@ name_opt = ca_default cert_opt = ca_default default_days = 365 default_crl_days = 30 -default_md = sha1 +default_md = sha256 preserve = no copy_extensions = copy policy = ca_policy_anything unique_subject = no +x509_extensions = ca_x509_ext +crl_extensions = crl_x509_ext [ ca_policy_anything ] countryName = optional @@ -34,7 +36,7 @@ surname = optional default_bits = 2048 encrypt_key = no distinguished_name = req_dn -x509_extensions = req_x509_ext +req_extensions = req_x509_ext prompt = no [ req_dn ] @@ -43,9 +45,20 @@ CN = TEST ENTITY ISP5c [ req_x509_ext ] basicConstraints = critical,CA:true subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid keyUsage = critical,keyCertSign,cRLSign subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/ISP5c/ authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/LIR3.cer sbgp-autonomousSysNum = critical,AS:64534-64540 #sbgp-ipAddrBlock = critical,??? + +[ ca_x509_ext ] +basicConstraints = critical,CA:true +authorityKeyIdentifier = keyid:always +keyUsage = critical,keyCertSign,cRLSign +subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/ISP5c/ +authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/LIR3.cer +sbgp-autonomousSysNum = critical,AS:64534-64540 +#sbgp-ipAddrBlock = critical,??? + +[ crl_x509_ext ] +authorityKeyIdentifier = keyid:always |