From a7be5759cf9d8e2bf7c1ecd0efa2d53aae9ab706 Mon Sep 17 00:00:00 2001 From: Rich Salz Date: Sun, 12 Jun 2016 22:21:54 -0400 Subject: RT3809: basicConstraints is critical This is really a security bugfix, not enhancement any more. Everyone knows critical extensions. Reviewed-by: Dr. Stephen Henson --- test/CAss.cnf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'test/CAss.cnf') diff --git a/test/CAss.cnf b/test/CAss.cnf index 336e82fd52..b20a242760 100644 --- a/test/CAss.cnf +++ b/test/CAss.cnf @@ -71,6 +71,6 @@ emailAddress = optional [ v3_ca ] subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always,issuer:always -basicConstraints = CA:true,pathlen:1 +basicConstraints = critical,CA:true,pathlen:1 keyUsage = cRLSign, keyCertSign issuerAltName=issuer:copy -- cgit v1.2.3