summaryrefslogtreecommitdiffstats
path: root/apps/openssl-vms.cnf
diff options
context:
space:
mode:
authorDr. Stephen Henson <steve@openssl.org>2009-04-21 15:02:20 +0000
committerDr. Stephen Henson <steve@openssl.org>2009-04-21 15:02:20 +0000
commit71d3eaf35858f46b7b181860d0a6d7d77cff5c2c (patch)
treee5a0dffbd4ef9bd58832e890557bfd205d22f55f /apps/openssl-vms.cnf
parentef6b25be635a21cba91f03f2498da8e61e1d97ff (diff)
make update.
Diffstat (limited to 'apps/openssl-vms.cnf')
-rw-r--r--apps/openssl-vms.cnf6
1 files changed, 3 insertions, 3 deletions
diff --git a/apps/openssl-vms.cnf b/apps/openssl-vms.cnf
index 52ade56653..20ed61bc3e 100644
--- a/apps/openssl-vms.cnf
+++ b/apps/openssl-vms.cnf
@@ -231,7 +231,7 @@ keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid:always,issuer:always
+authorityKeyIdentifier=keyid:always,issuer
# This is what PKIX recommends but some broken software chokes on critical
# extensions.
@@ -264,7 +264,7 @@ basicConstraints = CA:true
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
# issuerAltName=issuer:copy
-authorityKeyIdentifier=keyid:always,issuer:always
+authorityKeyIdentifier=keyid:always
[ proxy_cert_ext ]
# These extensions should be added when creating a proxy certificate
@@ -297,7 +297,7 @@ nsComment = "OpenSSL Generated Certificate"
# PKIX recommendations harmless if included in all certificates.
subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer:always
+authorityKeyIdentifier=keyid,issuer
# This stuff is for subjectAltName and issuerAltname.
# Import the email address.