diff options
| author | Matthew Wild <mwild1@gmail.com> | 2015-11-17 17:12:45 +0000 |
|---|---|---|
| committer | Matthew Wild <mwild1@gmail.com> | 2015-11-17 17:12:45 +0000 |
| commit | e4f2d5b6cd12d6f850ab39acb7a311efd9a2aaec (patch) | |
| tree | 2dbe4eb578cb9b2bdffa5f395573b3f6d3a6ea39 /certs | |
| parent | 094164e5f0bf835e4fd1dcefa57f3bb4add8325d (diff) | |
| parent | 3c75f782eddde40791ffab6e1156d1b7861adb00 (diff) | |
| download | prosody-e4f2d5b6cd12d6f850ab39acb7a311efd9a2aaec.tar.gz prosody-e4f2d5b6cd12d6f850ab39acb7a311efd9a2aaec.zip | |
Merge 0.10->trunk
Diffstat (limited to 'certs')
| -rw-r--r-- | certs/openssl.cnf | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/certs/openssl.cnf b/certs/openssl.cnf index 091409c4..ee17b1cf 100644 --- a/certs/openssl.cnf +++ b/certs/openssl.cnf @@ -13,8 +13,8 @@ SRVName = 1.3.6.1.5.5.7.8.7 default_bits = 4096 default_keyfile = example.com.key distinguished_name = distinguished_name -req_extensions = v3_extensions -x509_extensions = v3_extensions +req_extensions = certrequest +x509_extensions = selfsigned # ask about the DN? prompt = no @@ -28,16 +28,22 @@ organizationName = Your Organisation organizationalUnitName = XMPP Department emailAddress = xmpp@example.com -[ v3_extensions ] +[ certrequest ] # for certificate requests (req_extensions) -# and self-signed certificates (x509_extensions) basicConstraints = CA:FALSE keyUsage = digitalSignature,keyEncipherment extendedKeyUsage = serverAuth,clientAuth subjectAltName = @subject_alternative_name +[ selfsigned ] + +# and self-signed certificates (x509_extensions) + +basicConstraints = CA:TRUE +subjectAltName = @subject_alternative_name + [ subject_alternative_name ] # See http://tools.ietf.org/html/rfc6120#section-13.7.1.2 for more info. |