Don't add the TS EKU by default in openssl.cnf because it then

makes certificates genereated by ca, CA.pl etc useless for anything else.
This commit is contained in:
Dr. Stephen Henson 2006-11-07 14:27:55 +00:00
parent f1845cbee8
commit 5456583294

View File

@ -212,7 +212,7 @@ authorityKeyIdentifier=keyid,issuer
#nsSslServerName
# This is required for TSA certificates.
extendedKeyUsage = critical,timeStamping
# extendedKeyUsage = critical,timeStamping
[ v3_req ]