Index: net/data/ssl/scripts/redundant-ca.cnf |
diff --git a/net/data/ssl/scripts/redundant-ca.cnf b/net/data/ssl/scripts/redundant-ca.cnf |
index 5707b730bfbbc51356e104850f81fb8f4eed50b8..46e395fa890d414ca9c1e62c3bcdbd7b275f1511 100644 |
--- a/net/data/ssl/scripts/redundant-ca.cnf |
+++ b/net/data/ssl/scripts/redundant-ca.cnf |
@@ -30,9 +30,16 @@ extendedKeyUsage = serverAuth,clientAuth |
# Extensions to add when signing a request for an intermediate/CA cert |
basicConstraints = critical, CA:true |
subjectKeyIdentifier = hash |
-#authorityKeyIdentifier = keyid:always |
keyUsage = critical, keyCertSign, cRLSign |
+[ca_cert_with_aki] |
+# Extensions to add when signing a request for an intermediate/CA cert |
+basicConstraints = critical, CA:true |
+subjectKeyIdentifier = hash |
+authorityKeyIdentifier = keyid:always |
+keyUsage = critical, keyCertSign, cRLSign |
+ |
+ |
[crl_extensions] |
# Extensions to add when signing a CRL |
authorityKeyIdentifier = keyid:always |