openssl/test/v3_ca_exts.cnf

basicConstraints = critical, CA:true
keyUsage = cRLSign, keyCertSign
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always
make various test CA certs RFC 5280 compliant w.r.t. X509 extensions Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13719) 2020-12-13 04:36:06 +08:00			`basicConstraints = critical, CA:true`
Make x509 -force_pubkey test case with self-issued cert more realistic by adding CA basic constraints, CA key usage, and key IDs to the cert and by add -partial_chain to the verify call that trusts this cert Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/10587) 2019-12-24 03:15:49 +08:00			`keyUsage = cRLSign, keyCertSign`
			`subjectKeyIdentifier = hash`
			`authorityKeyIdentifier = keyid:always`