Renewed self-signed OCSP signer certificate

2014-03-27 22:52:11 +01:00
parent 0462304dbb
commit 7afd217ff9
4 changed files with 45 additions and 43 deletions
@@ -165,10 +165,12 @@ crlDistributionPoints          	= URI:http://crl.strongswan.org/strongswan.crl

 [ ca_ext ]

-basicConstraints               	= critical, CA:TRUE, pathlen:1
+basicConstraints               	= critical, CA:TRUE #, pathlen:1
 keyUsage                        = cRLSign, keyCertSign
 subjectKeyIdentifier		= hash
 authorityKeyIdentifier		= keyid, issuer:always
+#subjectAltName                  = DNS:$ENV::COMMON_NAME
+#extendedKeyUsage               = OCSPSigning

 ####################################################################