add subjectKeyIdentifier, authorityKeyIdentifier

2011-05-04 22:41:55 +02:00 · 2011-05-04 22:41:55 +02:00 · 634a2ca9c7
parent 1448b51767
commit 634a2ca9c7
1 changed files with 4 additions and 0 deletions
--- a/rootreq.conf
+++ b/rootreq.conf
@ -44,3 +44,7 @@ emailAddress_default            = rootca@example.org
 basicConstraints                = critical, CA:true, pathlen:1
 keyUsage                        = critical, keyCertSign,cRLSign
 nsComment                       = "Example Labs Root Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier   = hash
+authorityKeyIdentifier = keyid:always,issuer:always