aboutsummaryrefslogtreecommitdiffstats
path: root/certs
diff options
context:
space:
mode:
authorMatthew Wild <mwild1@gmail.com>2015-11-17 17:12:45 +0000
committerMatthew Wild <mwild1@gmail.com>2015-11-17 17:12:45 +0000
commite4f2d5b6cd12d6f850ab39acb7a311efd9a2aaec (patch)
tree2dbe4eb578cb9b2bdffa5f395573b3f6d3a6ea39 /certs
parent094164e5f0bf835e4fd1dcefa57f3bb4add8325d (diff)
parent3c75f782eddde40791ffab6e1156d1b7861adb00 (diff)
downloadprosody-e4f2d5b6cd12d6f850ab39acb7a311efd9a2aaec.tar.gz
prosody-e4f2d5b6cd12d6f850ab39acb7a311efd9a2aaec.zip
Merge 0.10->trunk
Diffstat (limited to 'certs')
-rw-r--r--certs/openssl.cnf14
1 files changed, 10 insertions, 4 deletions
diff --git a/certs/openssl.cnf b/certs/openssl.cnf
index 091409c4..ee17b1cf 100644
--- a/certs/openssl.cnf
+++ b/certs/openssl.cnf
@@ -13,8 +13,8 @@ SRVName = 1.3.6.1.5.5.7.8.7
default_bits = 4096
default_keyfile = example.com.key
distinguished_name = distinguished_name
-req_extensions = v3_extensions
-x509_extensions = v3_extensions
+req_extensions = certrequest
+x509_extensions = selfsigned
# ask about the DN?
prompt = no
@@ -28,16 +28,22 @@ organizationName = Your Organisation
organizationalUnitName = XMPP Department
emailAddress = xmpp@example.com
-[ v3_extensions ]
+[ certrequest ]
# for certificate requests (req_extensions)
-# and self-signed certificates (x509_extensions)
basicConstraints = CA:FALSE
keyUsage = digitalSignature,keyEncipherment
extendedKeyUsage = serverAuth,clientAuth
subjectAltName = @subject_alternative_name
+[ selfsigned ]
+
+# and self-signed certificates (x509_extensions)
+
+basicConstraints = CA:TRUE
+subjectAltName = @subject_alternative_name
+
[ subject_alternative_name ]
# See http://tools.ietf.org/html/rfc6120#section-13.7.1.2 for more info.