diff options
| author | Stefan H. Holek <stefan@epy.co.at> | 2012-12-11 21:39:17 +0100 |
|---|---|---|
| committer | Erich Eckner <git@eckner.net> | 2019-09-02 12:03:10 +0200 |
| commit | 537fb1c35ea3a0f0ed7efad138c46f02f19c5539 (patch) | |
| tree | c8347bdb3d9d6d2df8f5cf72fe48528874bd702f | |
| parent | 100b3c94784f2f1c12daa923823651b03886171e (diff) | |
| download | simple-pki-537fb1c35ea3a0f0ed7efad138c46f02f19c5539.tar.xz | |
Don't copy extensions in root CA.
| -rw-r--r-- | etc/root-ca.conf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/etc/root-ca.conf b/etc/root-ca.conf index e68196b..cd00238 100644 --- a/etc/root-ca.conf +++ b/etc/root-ca.conf @@ -56,7 +56,7 @@ email_in_dn = no # Add email to cert DN preserve = no # Keep passed DN ordering name_opt = ca_default # Subject DN display options cert_opt = ca_default # Certificate display options -copy_extensions = copy # Copy extensions from CSR +copy_extensions = none # Copy extensions from CSR x509_extensions = signing_ca_ext # Default cert extensions default_crl_days = 365 # How long before next CRL crl_extensions = crl_ext # CRL extensions |