mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-03 21:27:38 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

cert/openssl.cnf: Split CSR and self-signed extensions into separate sections (see d2d7ad2563f9)

Browse source
This commit is contained in:
Kim Alvefur 2015-11-09 14:16:39 +01:00
parent b3a384b2e9
commit cbb1f06088
1 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

14
certs/openssl.cnf
View file

@ -13,8 +13,8 @@ SRVName = 1.3.6.1.5.5.7.8.7
default_bits = 4096 default_bits = 4096
default_keyfile = example.com.key default_keyfile = example.com.key
distinguished_name = distinguished_name distinguished_name = distinguished_name
req_extensions = v3_extensions req_extensions = certrequest
x509_extensions = v3_extensions x509_extensions = selfsigned
# ask about the DN? # ask about the DN?
prompt = no prompt = no
@ -28,16 +28,22 @@ organizationName = Your Organisation
organizationalUnitName = XMPP Department organizationalUnitName = XMPP Department
emailAddress = xmpp@example.com emailAddress = xmpp@example.com
[ v3_extensions ] [ certrequest ]
# for certificate requests (req_extensions) # for certificate requests (req_extensions)
# and self-signed certificates (x509_extensions)
basicConstraints = CA:FALSE basicConstraints = CA:FALSE
keyUsage = digitalSignature,keyEncipherment keyUsage = digitalSignature,keyEncipherment
extendedKeyUsage = serverAuth,clientAuth extendedKeyUsage = serverAuth,clientAuth
subjectAltName = @subject_alternative_name subjectAltName = @subject_alternative_name
[ selfsigned ]
# and self-signed certificates (x509_extensions)
basicConstraints = CA:TRUE
subjectAltName = @subject_alternative_name
[ subject_alternative_name ] [ subject_alternative_name ]
# See http://tools.ietf.org/html/rfc6120#section-13.7.1.2 for more info. # See http://tools.ietf.org/html/rfc6120#section-13.7.1.2 for more info.