mcy
/
scripts
1
0
Fork 0
Code Issues Pull Requests Releases Activity

[ssl_mgmt] Set CA:FALSE constraint for certs

This commit is contained in:
Thomas Preud'homme 2014-11-04 22:18:42 +00:00
parent d991b290bf
commit ccfdd24ff3
5 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ssl_mgmt/openssl.cnf.in
View File

@ -24,7 +24,7 @@ policy = policy_match
copy_extensions = copy
# We want those extensions only to generate the root certificates, so
# we specify it on the command line:
x509_extensions = v3_ca
x509_extensions = v3_x509
[ policy_match ]
countryName = match
@ -64,3 +64,8 @@ authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = CA:FALSE
subjectKeyIdentifier = hash
subjectAltName = @ALTNAME@
[ v3_x509 ]
basicConstraints = CA:FALSE
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always

3
ssl_mgmt/tests/5/cmdline Normal file
View File

@ -0,0 +1,3 @@
keyId= cnfFilePath=./ssl_mgmt.conf ../ssl_mgmt renew foo \
&& openssl x509 -in destdir/certs/foo-cert.pem -text -noout \
| grep -A 1 "X509v3 Basic Constraints:" | grep "CA:FALSE"

2
ssl_mgmt/tests/5/driver Executable file
View File

@ -0,0 +1,2 @@
echo
echo "y"

1
ssl_mgmt/tests/5/fini Symbolic link
View File

@ -0,0 +1 @@
../restore_foo_fini

1
ssl_mgmt/tests/5/init Symbolic link
View File

@ -0,0 +1 @@
../save_foo_init