From 634a2ca9c728b05374462b1d7b4582f7d34699c3 Mon Sep 17 00:00:00 2001
From: Jan Dittberner <jan@dittberner.info>
Date: Wed, 4 May 2011 22:41:55 +0200
Subject: [PATCH] add subjectKeyIdentifier, authorityKeyIdentifier

---
 rootreq.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/rootreq.conf b/rootreq.conf
index 6a418ff..73e34bf 100644
--- a/rootreq.conf
+++ b/rootreq.conf
@@ -44,3 +44,7 @@ emailAddress_default            = rootca@example.org
 basicConstraints                = critical, CA:true, pathlen:1
 keyUsage                        = critical, keyCertSign,cRLSign
 nsComment                       = "Example Labs Root Certificate"
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier   = hash
+authorityKeyIdentifier = keyid:always,issuer:always