jan/osslconfexamples
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

remove unused fields

Browse source
This commit is contained in:
Jan Dittberner 2011-05-04 21:56:29 +02:00
parent 1369f5192c
commit 69b651ec7f
1 changed files with 1 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
rootreq.conf
View file

@ -5,8 +5,6 @@
RANDFILE = $ENV::HOME/ca/.rnd RANDFILE = $ENV::HOME/ca/.rnd
extensions = v3_ext
[ req ] [ req ]
default_bits = 2048 default_bits = 2048
distinguished_name = req_distinguished_name distinguished_name = req_distinguished_name
@ -14,7 +12,7 @@ x509_extensions = v3_ca_ext
# This sets a mask for permitted string types. There are several options. # This sets a mask for permitted string types. There are several options.
# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings). # nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
string_mask = nombstr string_mask = nombstr
[ req_distinguished_name ] [ req_distinguished_name ]
countryName = Country Name (2 letter code) countryName = Country Name (2 letter code)
@ -46,12 +44,3 @@ emailAddress_default = rootca@example.org
basicConstraints = critical, CA:true, pathlen:1 basicConstraints = critical, CA:true, pathlen:1
keyUsage = critical, keyCertSign,cRLSign keyUsage = critical, keyCertSign,cRLSign
nsComment = "Example Labs Root Certificate" nsComment = "Example Labs Root Certificate"
# PKIX recommendations harmless if included in all certificates.
subjectKeyIdentifier=hash
authorityKeyIdentifier = keyid:always,issuer:always
# Include email address in subject alt name: another PKIX recommendation
subjectAltName = email:copy
authorityInfoAccess = OCSP;URI:http://ocsp.rootca.example.org/
crlDistributionPoints = URI:http://rootca.example.org/rootca.crl