From 537fb1c35ea3a0f0ed7efad138c46f02f19c5539 Mon Sep 17 00:00:00 2001
From: "Stefan H. Holek" <stefan@epy.co.at>
Date: Tue, 11 Dec 2012 21:39:17 +0100
Subject: Don't copy extensions in root CA.

---
 etc/root-ca.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'etc')

diff --git a/etc/root-ca.conf b/etc/root-ca.conf
index e68196b..cd00238 100644
--- a/etc/root-ca.conf
+++ b/etc/root-ca.conf
@@ -56,7 +56,7 @@ email_in_dn             = no                    # Add email to cert DN
 preserve                = no                    # Keep passed DN ordering
 name_opt                = ca_default            # Subject DN display options
 cert_opt                = ca_default            # Certificate display options
-copy_extensions         = copy                  # Copy extensions from CSR
+copy_extensions         = none                  # Copy extensions from CSR
 x509_extensions         = signing_ca_ext        # Default cert extensions
 default_crl_days        = 365                   # How long before next CRL
 crl_extensions          = crl_ext               # CRL extensions
-- 
cgit v1.2.3-70-g09d2