diff options
| author | Kim Alvefur <zash@zash.se> | 2015-10-11 18:49:14 +0200 |
|---|---|---|
| committer | Kim Alvefur <zash@zash.se> | 2015-10-11 18:49:14 +0200 |
| commit | 40775d4c4574ddca914459f9a993f3c8d3e16774 (patch) | |
| tree | 389056cc6e2f0722f49655ecdffd4e8b9dfb06b7 | |
| parent | 3945d3f2f8ad4eb04d9acc7c3b8fccb18e37dae1 (diff) | |
| download | prosody-40775d4c4574ddca914459f9a993f3c8d3e16774.tar.gz prosody-40775d4c4574ddca914459f9a993f3c8d3e16774.zip | |
util.openssl: Separate extension sections into one for self-signed certs and one for requests
| -rw-r--r-- | util/openssl.lua | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/util/openssl.lua b/util/openssl.lua index ef3fba96..39fe99d6 100644 --- a/util/openssl.lua +++ b/util/openssl.lua @@ -18,8 +18,8 @@ function config.new() return setmetatable({ req = { distinguished_name = "distinguished_name", - req_extensions = "v3_extensions", - x509_extensions = "v3_extensions", + req_extensions = "certrequest", + x509_extensions = "selfsigned", prompt = "no", }, distinguished_name = { @@ -31,12 +31,16 @@ function config.new() commonName = "example.com", emailAddress = "xmpp@example.com", }, - v3_extensions = { + certrequest = { basicConstraints = "CA:FALSE", keyUsage = "digitalSignature,keyEncipherment", extendedKeyUsage = "serverAuth,clientAuth", subjectAltName = "@subject_alternative_name", }, + selfsigned = { + basicConstraints = "CA:TRUE", + subjectAltName = "@subject_alternative_name", + }, subject_alternative_name = { DNS = {}, otherName = {}, |