Commit 9b209994 authored by nimrod's avatar nimrod
Browse files

- Stricter constraints.

parent d78bcbb8

ssl-ca

+3 −2
Original line number Diff line number Diff line
@@ -41,10 +41,11 @@ RANDFILE = /dev/urandom 
CN = \${ENV::cn}



[ v3_ca ]

basicConstraints = CA:true

basicConstraints = critical, CA:true

keyUsage = keyCertSign, cRLSign



[ v3_req ]

basicConstraints = CA:false

basicConstraints = critical, CA:false

subjectAltName = @AltNames



[ AltNames ]