| Index: net/data/ssl/scripts/redundant-ca.cnf
|
| diff --git a/net/data/ssl/scripts/redundant-ca.cnf b/net/data/ssl/scripts/redundant-ca.cnf
|
| index 5707b730bfbbc51356e104850f81fb8f4eed50b8..46e395fa890d414ca9c1e62c3bcdbd7b275f1511 100644
|
| --- a/net/data/ssl/scripts/redundant-ca.cnf
|
| +++ b/net/data/ssl/scripts/redundant-ca.cnf
|
| @@ -30,9 +30,16 @@ extendedKeyUsage = serverAuth,clientAuth
|
| # Extensions to add when signing a request for an intermediate/CA cert
|
| basicConstraints = critical, CA:true
|
| subjectKeyIdentifier = hash
|
| -#authorityKeyIdentifier = keyid:always
|
| keyUsage = critical, keyCertSign, cRLSign
|
|
|
| +[ca_cert_with_aki]
|
| +# Extensions to add when signing a request for an intermediate/CA cert
|
| +basicConstraints = critical, CA:true
|
| +subjectKeyIdentifier = hash
|
| +authorityKeyIdentifier = keyid:always
|
| +keyUsage = critical, keyCertSign, cRLSign
|
| +
|
| +
|
| [crl_extensions]
|
| # Extensions to add when signing a CRL
|
| authorityKeyIdentifier = keyid:always
|
|
|