From 69b651ec7f1d5a22869a54f7dc52650bf63d9d44 Mon Sep 17 00:00:00 2001 From: Jan Dittberner Date: Wed, 4 May 2011 21:56:29 +0200 Subject: [PATCH] remove unused fields --- rootreq.conf | 13 +------------ 1 file changed, 1 insertion(+), 12 deletions(-) diff --git a/rootreq.conf b/rootreq.conf index 7c11dfd..dfb5ed8 100644 --- a/rootreq.conf +++ b/rootreq.conf @@ -5,8 +5,6 @@ RANDFILE = $ENV::HOME/ca/.rnd -extensions = v3_ext - [ req ] default_bits = 2048 distinguished_name = req_distinguished_name @@ -14,7 +12,7 @@ x509_extensions = v3_ca_ext # This sets a mask for permitted string types. There are several options. # nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). -string_mask = nombstr +string_mask = nombstr [ req_distinguished_name ] countryName = Country Name (2 letter code) @@ -46,12 +44,3 @@ emailAddress_default = rootca@example.org basicConstraints = critical, CA:true, pathlen:1 keyUsage = critical, keyCertSign,cRLSign nsComment = "Example Labs Root Certificate" - -# PKIX recommendations harmless if included in all certificates. -subjectKeyIdentifier=hash -authorityKeyIdentifier = keyid:always,issuer:always - -# Include email address in subject alt name: another PKIX recommendation -subjectAltName = email:copy -authorityInfoAccess = OCSP;URI:http://ocsp.rootca.example.org/ -crlDistributionPoints = URI:http://rootca.example.org/rootca.crl