diff options
| author | Dr. Stephen Henson <steve@openssl.org> | 2012-12-15 00:29:58 +0100 |
|---|---|---|
| committer | Dr. Stephen Henson <steve@openssl.org> | 2012-12-15 00:29:58 +0100 |
| commit | 92821996de4a381635f5d048345c3b0f8fe9a30b (patch) | |
| tree | 68b489848580c839d0236e9a08e375d85aca747d /demos/certs | |
| parent | apps/ocsp.c (diff) | |
| download | openssl-92821996de4a381635f5d048345c3b0f8fe9a30b.tar.xz openssl-92821996de4a381635f5d048345c3b0f8fe9a30b.zip | |
oops, revert, committed in error
Diffstat (limited to 'demos/certs')
| -rw-r--r-- | demos/certs/ca.cnf | 3 | ||||
| -rw-r--r-- | demos/certs/mkcerts.sh | 2 |
2 files changed, 1 insertions, 4 deletions
diff --git a/demos/certs/ca.cnf b/demos/certs/ca.cnf index ddf440bcc8..c45fcfd61e 100644 --- a/demos/certs/ca.cnf +++ b/demos/certs/ca.cnf @@ -35,7 +35,6 @@ commonName = $ENV::CN basicConstraints=critical, CA:FALSE keyUsage=critical, nonRepudiation, digitalSignature, keyEncipherment -subjectAltName=DNS:crl.host.com # This will be displayed in Netscape's comment listbox. nsComment = "OpenSSL Generated Certificate" @@ -43,14 +42,12 @@ nsComment = "OpenSSL Generated Certificate" # PKIX recommendations harmless if included in all certificates. subjectKeyIdentifier=hash authorityKeyIdentifier=keyid -authorityInfoAccess = OCSP;URI:http://ocsp.host.com:8080/cgi-bin/prinenv/some/ocsp/path # OCSP responder certificate [ ocsp_cert ] basicConstraints=critical, CA:FALSE keyUsage=critical, nonRepudiation, digitalSignature, keyEncipherment - # This will be displayed in Netscape's comment listbox. nsComment = "OpenSSL Generated Certificate" diff --git a/demos/certs/mkcerts.sh b/demos/certs/mkcerts.sh index d0fdeac72e..18daa6bcfb 100644 --- a/demos/certs/mkcerts.sh +++ b/demos/certs/mkcerts.sh @@ -15,7 +15,7 @@ $OPENSSL x509 -req -in intreq.pem -CA root.pem -days 3600 \ -extfile ca.cnf -extensions v3_ca -CAcreateserial -out intca.pem # Server certificate: create request first -CN="crl.host.com" $OPENSSL req -config ca.cnf -nodes \ +CN="Test Server Cert" $OPENSSL req -config ca.cnf -nodes \ -keyout skey.pem -out req.pem -newkey rsa:1024 # Sign request: end entity extensions $OPENSSL x509 -req -in req.pem -CA intca.pem -CAkey intkey.pem -days 3600 \ |