remove unused fields
This commit is contained in:
parent
1369f5192c
commit
69b651ec7f
1 changed files with 1 additions and 12 deletions
13
rootreq.conf
13
rootreq.conf
|
@ -5,8 +5,6 @@
|
|||
|
||||
RANDFILE = $ENV::HOME/ca/.rnd
|
||||
|
||||
extensions = v3_ext
|
||||
|
||||
[ req ]
|
||||
default_bits = 2048
|
||||
distinguished_name = req_distinguished_name
|
||||
|
@ -14,7 +12,7 @@ x509_extensions = v3_ca_ext
|
|||
|
||||
# This sets a mask for permitted string types. There are several options.
|
||||
# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
|
||||
string_mask = nombstr
|
||||
string_mask = nombstr
|
||||
|
||||
[ req_distinguished_name ]
|
||||
countryName = Country Name (2 letter code)
|
||||
|
@ -46,12 +44,3 @@ emailAddress_default = rootca@example.org
|
|||
basicConstraints = critical, CA:true, pathlen:1
|
||||
keyUsage = critical, keyCertSign,cRLSign
|
||||
nsComment = "Example Labs Root Certificate"
|
||||
|
||||
# PKIX recommendations harmless if included in all certificates.
|
||||
subjectKeyIdentifier=hash
|
||||
authorityKeyIdentifier = keyid:always,issuer:always
|
||||
|
||||
# Include email address in subject alt name: another PKIX recommendation
|
||||
subjectAltName = email:copy
|
||||
authorityInfoAccess = OCSP;URI:http://ocsp.rootca.example.org/
|
||||
crlDistributionPoints = URI:http://rootca.example.org/rootca.crl
|
||||
|
|
Loading…
Reference in a new issue