Comparison

certs/openssl.cnf @ 6924:c37ad3e1fdd9

Merge 0.9->0.10
author Matthew Wild <mwild1@gmail.com>
date Tue, 17 Nov 2015 17:04:04 +0000
parent 6922:e0672860d208
child 12604:bd9e006a7a74
comparison
equal deleted inserted replaced
6921:45fa2e554c79 6924:c37ad3e1fdd9
11 [ req ] 11 [ req ]
12 12
13 default_bits = 4096 13 default_bits = 4096
14 default_keyfile = example.com.key 14 default_keyfile = example.com.key
15 distinguished_name = distinguished_name 15 distinguished_name = distinguished_name
16 req_extensions = v3_extensions 16 req_extensions = certrequest
17 x509_extensions = v3_extensions 17 x509_extensions = selfsigned
18 18
19 # ask about the DN? 19 # ask about the DN?
20 prompt = no 20 prompt = no
21 21
22 [ distinguished_name ] 22 [ distinguished_name ]
26 localityName = The Internet 26 localityName = The Internet
27 organizationName = Your Organisation 27 organizationName = Your Organisation
28 organizationalUnitName = XMPP Department 28 organizationalUnitName = XMPP Department
29 emailAddress = xmpp@example.com 29 emailAddress = xmpp@example.com
30 30
31 [ v3_extensions ] 31 [ certrequest ]
32 32
33 # for certificate requests (req_extensions) 33 # for certificate requests (req_extensions)
34 # and self-signed certificates (x509_extensions)
35 34
36 basicConstraints = CA:FALSE 35 basicConstraints = CA:FALSE
37 keyUsage = digitalSignature,keyEncipherment 36 keyUsage = digitalSignature,keyEncipherment
38 extendedKeyUsage = serverAuth,clientAuth 37 extendedKeyUsage = serverAuth,clientAuth
39 subjectAltName = @subject_alternative_name 38 subjectAltName = @subject_alternative_name
39
40 [ selfsigned ]
41
42 # and self-signed certificates (x509_extensions)
43
44 basicConstraints = CA:TRUE
45 subjectAltName = @subject_alternative_name
40 46
41 [ subject_alternative_name ] 47 [ subject_alternative_name ]
42 48
43 # See http://tools.ietf.org/html/rfc6120#section-13.7.1.2 for more info. 49 # See http://tools.ietf.org/html/rfc6120#section-13.7.1.2 for more info.
44 50