mirror of
https://github.com/openssl/openssl.git
synced 2024-12-09 05:51:54 +08:00
4acd484d55
by adding CA basic constraints, CA key usage, and key IDs to the cert and by add -partial_chain to the verify call that trusts this cert Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/10587)
6 lines
126 B
INI
6 lines
126 B
INI
basicConstraints = CA:true
|
|
keyUsage = cRLSign, keyCertSign
|
|
subjectKeyIdentifier = hash
|
|
authorityKeyIdentifier = keyid:always
|
|
|