From 100b3c94784f2f1c12daa923823651b03886171e Mon Sep 17 00:00:00 2001 From: "Stefan H. Holek" Date: Sun, 9 Dec 2012 19:47:25 +0100 Subject: Rename CA sections. --- etc/root-ca.conf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/etc/root-ca.conf b/etc/root-ca.conf index 52d2fa2..e68196b 100644 --- a/etc/root-ca.conf +++ b/etc/root-ca.conf @@ -57,7 +57,7 @@ preserve = no # Keep passed DN ordering name_opt = ca_default # Subject DN display options cert_opt = ca_default # Certificate display options copy_extensions = copy # Copy extensions from CSR -x509_extensions = leafca_ext # Default cert extensions +x509_extensions = signing_ca_ext # Default cert extensions default_crl_days = 365 # How long before next CRL crl_extensions = crl_ext # CRL extensions @@ -83,13 +83,13 @@ emailAddress = optional # Certificate extensions define what types of certificates the CA is able to # create. -[ rootca_ext ] +[ root_ca_ext ] keyUsage = critical,keyCertSign,cRLSign basicConstraints = critical,CA:true subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always -[ leafca_ext ] +[ signing_ca_ext ] keyUsage = critical,keyCertSign,cRLSign basicConstraints = critical,CA:true,pathlen:0 subjectKeyIdentifier = hash -- cgit v1.2.3-70-g09d2