diff options
| author | Stefan H. Holek <stefan@epy.co.at> | 2012-12-09 19:47:25 +0100 |
|---|---|---|
| committer | Erich Eckner <git@eckner.net> | 2019-09-02 12:03:10 +0200 |
| commit | 100b3c94784f2f1c12daa923823651b03886171e (patch) | |
| tree | 67075e25e7c3cc8d3a09dac1b4094ba81fdfc360 | |
| parent | 462325d6efbc4441a87804d407273d9787d18375 (diff) | |
| download | simple-pki-100b3c94784f2f1c12daa923823651b03886171e.tar.xz | |
Rename CA sections.
| -rw-r--r-- | etc/root-ca.conf | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/root-ca.conf b/etc/root-ca.conf index 52d2fa2..e68196b 100644 --- a/etc/root-ca.conf +++ b/etc/root-ca.conf @@ -57,7 +57,7 @@ preserve = no # Keep passed DN ordering name_opt = ca_default # Subject DN display options cert_opt = ca_default # Certificate display options copy_extensions = copy # Copy extensions from CSR -x509_extensions = leafca_ext # Default cert extensions +x509_extensions = signing_ca_ext # Default cert extensions default_crl_days = 365 # How long before next CRL crl_extensions = crl_ext # CRL extensions @@ -83,13 +83,13 @@ emailAddress = optional # Certificate extensions define what types of certificates the CA is able to # create. -[ rootca_ext ] +[ root_ca_ext ] keyUsage = critical,keyCertSign,cRLSign basicConstraints = critical,CA:true subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always -[ leafca_ext ] +[ signing_ca_ext ] keyUsage = critical,keyCertSign,cRLSign basicConstraints = critical,CA:true,pathlen:0 subjectKeyIdentifier = hash |