diff options
| -rw-r--r-- | etc/root-ca.conf | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/etc/root-ca.conf b/etc/root-ca.conf index 52d2fa2..e68196b 100644 --- a/etc/root-ca.conf +++ b/etc/root-ca.conf @@ -57,7 +57,7 @@ preserve = no # Keep passed DN ordering name_opt = ca_default # Subject DN display options cert_opt = ca_default # Certificate display options copy_extensions = copy # Copy extensions from CSR -x509_extensions = leafca_ext # Default cert extensions +x509_extensions = signing_ca_ext # Default cert extensions default_crl_days = 365 # How long before next CRL crl_extensions = crl_ext # CRL extensions @@ -83,13 +83,13 @@ emailAddress = optional # Certificate extensions define what types of certificates the CA is able to # create. -[ rootca_ext ] +[ root_ca_ext ] keyUsage = critical,keyCertSign,cRLSign basicConstraints = critical,CA:true subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always -[ leafca_ext ] +[ signing_ca_ext ] keyUsage = critical,keyCertSign,cRLSign basicConstraints = critical,CA:true,pathlen:0 subjectKeyIdentifier = hash |