evolix/shellpki
21
0
Fork 0
Code Issues Pull requests Releases 3 Wiki Activity

Add v3_ca extension when generating CA.

Browse source
This commit is contained in:
Benoît S. 2017-03-05 15:11:54 +01:00
parent 6a0f7712b0
commit 1d294c2463
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
openssl.cnf
View file

@ -29,6 +29,11 @@ emailAddress = supplied
default_bits = 2048 default_bits = 2048
distinguished_name = req_distinguished_name distinguished_name = req_distinguished_name
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer:always
basicConstraints = CA:true
[ req_distinguished_name ] [ req_distinguished_name ]
countryName = Country Name (2 letter code) countryName = Country Name (2 letter code)
countryName_default = FR countryName_default = FR

1
shellpki.sh
View file

@ -35,6 +35,7 @@ $OPENSSL genrsa -out $PREFIX/ca/private.key 2048
$OPENSSL req \ $OPENSSL req \
-config $CONFFILE \ -config $CONFFILE \
-new -x509 -days 3650 \ -new -x509 -days 3650 \
-extensions v3_ca \
-keyout $PREFIX/ca/private.key \ -keyout $PREFIX/ca/private.key \
-out $PREFIX/ca/cacert.pem -out $PREFIX/ca/cacert.pem