diff options
Diffstat (limited to 'demos/certs/ca.cnf')
| -rw-r--r-- | demos/certs/ca.cnf | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/demos/certs/ca.cnf b/demos/certs/ca.cnf index c45fcfd61e..ddf440bcc8 100644 --- a/demos/certs/ca.cnf +++ b/demos/certs/ca.cnf @@ -35,6 +35,7 @@ commonName = $ENV::CN basicConstraints=critical, CA:FALSE keyUsage=critical, nonRepudiation, digitalSignature, keyEncipherment +subjectAltName=DNS:crl.host.com # This will be displayed in Netscape's comment listbox. nsComment = "OpenSSL Generated Certificate" @@ -42,12 +43,14 @@ nsComment = "OpenSSL Generated Certificate" # PKIX recommendations harmless if included in all certificates. subjectKeyIdentifier=hash authorityKeyIdentifier=keyid +authorityInfoAccess = OCSP;URI:http://ocsp.host.com:8080/cgi-bin/prinenv/some/ocsp/path # OCSP responder certificate [ ocsp_cert ] basicConstraints=critical, CA:FALSE keyUsage=critical, nonRepudiation, digitalSignature, keyEncipherment + # This will be displayed in Netscape's comment listbox. nsComment = "OpenSSL Generated Certificate" |