lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-20 03:16:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

(legacy) openssl template for https://github.com/opnsense/core/issues/81

Browse Source
This commit is contained in:
Ad Schellevis 2015-12-14 20:53:43 +01:00
parent 94e5cd9fe5
commit 9b432e836f
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/etc/ssl/opnsense.cnf
View File

@ -69,7 +69,7 @@ cert_opt = ca_default # Certificate field options
# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
# so this is commented out by default to leave a V1 CRL.
# crlnumber must also be commented out to leave a V1 CRL.
# crl_extensions = crl_ext
crl_extensions = crl_ext
default_days = 365 # how long to certify for
default_crl_days= 30 # how long before next CRL
@ -186,14 +186,15 @@ basicConstraints=CA:FALSE
# nsCertType = client, email, objsign
# This is typical in keyUsage for a client certificate.
# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
# This will be displayed in Netscape's comment listbox.
nsComment = "OpenSSL Generated Certificate"
# PKIX recommendations harmless if included in all certificates.
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer
authorityKeyIdentifier=keyid,issuer:always
extendedKeyUsage=clientAuth
# This stuff is for subjectAltName and issuerAltname.
# Import the email address.
@ -215,6 +216,8 @@ authorityKeyIdentifier=keyid,issuer
# This is required for TSA certificates.
# extendedKeyUsage = critical,timeStamping
###OPNsense:usr_cert###
[ v3_req ]
# Extensions to add to a certificate request