remove unused fields
This commit is contained in:
		
							parent
							
								
									1369f5192c
								
							
						
					
					
						commit
						69b651ec7f
					
				
					 1 changed files with 1 additions and 12 deletions
				
			
		
							
								
								
									
										13
									
								
								rootreq.conf
									
										
									
									
									
								
							
							
						
						
									
										13
									
								
								rootreq.conf
									
										
									
									
									
								
							| 
						 | 
				
			
			@ -5,8 +5,6 @@
 | 
			
		|||
 | 
			
		||||
RANDFILE		= $ENV::HOME/ca/.rnd
 | 
			
		||||
 | 
			
		||||
extensions		= v3_ext 
 | 
			
		||||
 | 
			
		||||
[ req ]
 | 
			
		||||
default_bits		= 2048
 | 
			
		||||
distinguished_name	= req_distinguished_name
 | 
			
		||||
| 
						 | 
				
			
			@ -14,7 +12,7 @@ x509_extensions	        = v3_ca_ext
 | 
			
		|||
 | 
			
		||||
# This sets a mask for permitted string types. There are several options. 
 | 
			
		||||
# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
 | 
			
		||||
string_mask = nombstr
 | 
			
		||||
string_mask             = nombstr
 | 
			
		||||
 | 
			
		||||
[ req_distinguished_name ]
 | 
			
		||||
countryName			= Country Name (2 letter code)
 | 
			
		||||
| 
						 | 
				
			
			@ -46,12 +44,3 @@ emailAddress_default            = rootca@example.org
 | 
			
		|||
basicConstraints       = critical, CA:true, pathlen:1
 | 
			
		||||
keyUsage               = critical, keyCertSign,cRLSign
 | 
			
		||||
nsComment              = "Example Labs Root Certificate"
 | 
			
		||||
 | 
			
		||||
# PKIX recommendations harmless if included in all certificates.
 | 
			
		||||
subjectKeyIdentifier=hash
 | 
			
		||||
authorityKeyIdentifier = keyid:always,issuer:always
 | 
			
		||||
 | 
			
		||||
# Include email address in subject alt name: another PKIX recommendation
 | 
			
		||||
subjectAltName         = email:copy
 | 
			
		||||
authorityInfoAccess    = OCSP;URI:http://ocsp.rootca.example.org/
 | 
			
		||||
crlDistributionPoints  = URI:http://rootca.example.org/rootca.crl
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue