summaryrefslogtreecommitdiffstats
path: root/apps/openssl.cnf
diff options
context:
space:
mode:
authorRichard Levitte <levitte@openssl.org>2003-06-19 17:40:16 +0000
committerRichard Levitte <levitte@openssl.org>2003-06-19 17:40:16 +0000
commitfd4ef699133e445e8224f68d39cc155ea4a26c1a (patch)
treeacb3378c511af69b8c7686582fee88bccebd6e33 /apps/openssl.cnf
parent834ac33a3778bf5aa2c972d60e833bc6f83169df (diff)
Implement CRL numbers.
Contributed in whole by Laurent Genier <Laurent.Genier@intrinsec.com> PR: 644
Diffstat (limited to 'apps/openssl.cnf')
-rw-r--r--apps/openssl.cnf3
1 files changed, 3 insertions, 0 deletions
diff --git a/apps/openssl.cnf b/apps/openssl.cnf
index 2696044cf1..8941f454f8 100644
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -44,6 +44,8 @@ new_certs_dir = $dir/newcerts # default place for new certs.
certificate = $dir/cacert.pem # The CA certificate
serial = $dir/serial # The current serial number
+crlnumber = $dir/crlnumber # the current crl number
+ # must be commented out to leave a V1 CRL
crl = $dir/crl.pem # The current CRL
private_key = $dir/private/cakey.pem# The private key
RANDFILE = $dir/private/.rand # private random number file
@@ -60,6 +62,7 @@ cert_opt = ca_default # Certificate field options
# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
# so this is commented out by default to leave a V1 CRL.
+# crlnumber must also be commented out to leave a V1 CRL.
# crl_extensions = crl_ext
default_days = 365 # how long to certify for