diff options
Diffstat (limited to 'scripts/resource-cert-samples/ISP1.cnf')
| -rw-r--r-- | scripts/resource-cert-samples/ISP1.cnf | 19 |
1 files changed, 16 insertions, 3 deletions
diff --git a/scripts/resource-cert-samples/ISP1.cnf b/scripts/resource-cert-samples/ISP1.cnf index 179b2bd3..b43440bf 100644 --- a/scripts/resource-cert-samples/ISP1.cnf +++ b/scripts/resource-cert-samples/ISP1.cnf @@ -13,11 +13,13 @@ name_opt = ca_default cert_opt = ca_default default_days = 365 default_crl_days = 30 -default_md = sha1 +default_md = sha256 preserve = no copy_extensions = copy policy = ca_policy_anything unique_subject = no +x509_extensions = ca_x509_ext +crl_extensions = crl_x509_ext [ ca_policy_anything ] countryName = optional @@ -34,7 +36,7 @@ surname = optional default_bits = 2048 encrypt_key = no distinguished_name = req_dn -x509_extensions = req_x509_ext +req_extensions = req_x509_ext prompt = no [ req_dn ] @@ -43,9 +45,20 @@ CN = TEST ENTITY ISP1 [ req_x509_ext ] basicConstraints = critical,CA:true subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid keyUsage = critical,keyCertSign,cRLSign subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/ISP1/ authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/LIR1.cer sbgp-autonomousSysNum = critical,AS:64533 sbgp-ipAddrBlock = critical,IPv4:192.0.2.1-192.0.2.33 + +[ ca_x509_ext ] +basicConstraints = critical,CA:true +authorityKeyIdentifier = keyid:always +keyUsage = critical,keyCertSign,cRLSign +subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://wombats-r-us.hactrn.net/ISP1/ +authorityInfoAccess = caIssuers;URI:rsync://wombats-r-us.hactrn.net/LIR1.cer +sbgp-autonomousSysNum = critical,AS:64533 +sbgp-ipAddrBlock = critical,IPv4:192.0.2.1-192.0.2.33 + +[ crl_x509_ext ] +authorityKeyIdentifier = keyid:always |