diff options
| author | Rich Salz <rsalz@openssl.org> | 2016-06-13 04:21:54 +0200 |
|---|---|---|
| committer | Rich Salz <rsalz@openssl.org> | 2016-06-13 15:18:22 +0200 |
| commit | a7be5759cf9d8e2bf7c1ecd0efa2d53aae9ab706 (patch) | |
| tree | ad030fac8b3b0582d0dd76e16dfe5cd2158ba5e0 /test/CAss.cnf | |
| parent | bn/bn_add.c: favour counted loops over ifs and breaks. (diff) | |
| download | openssl-a7be5759cf9d8e2bf7c1ecd0efa2d53aae9ab706.tar.xz openssl-a7be5759cf9d8e2bf7c1ecd0efa2d53aae9ab706.zip | |
RT3809: basicConstraints is critical
This is really a security bugfix, not enhancement any more.
Everyone knows critical extensions.
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
Diffstat (limited to 'test/CAss.cnf')
| -rw-r--r-- | test/CAss.cnf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/test/CAss.cnf b/test/CAss.cnf index 336e82fd52..b20a242760 100644 --- a/test/CAss.cnf +++ b/test/CAss.cnf @@ -71,6 +71,6 @@ emailAddress = optional [ v3_ca ] subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always,issuer:always -basicConstraints = CA:true,pathlen:1 +basicConstraints = critical,CA:true,pathlen:1 keyUsage = cRLSign, keyCertSign issuerAltName=issuer:copy |