PROV: Add DERlib support for DSA

[openssl.git] / test / CAss.cnf

diff --git a/test/CAss.cnf b/test/CAss.cnf
index 336e82fd52ed4510b843b90623f3ea4e057d29f5..d63f85628ba92e339a8db51a2a7495be32f3dd1d 100644 (file)
--- a/test/CAss.cnf
+++ b/test/CAss.cnf
@@ -1,9 +1,3 @@
-#
-# SSLeay example configuration file.
-# This is mostly being used for generation of certificate requests.
-#
-
-RANDFILE               = ./.rnd
 
 ####################################################################
 [ req ]
@@ -43,7 +37,6 @@ certificate   = $dir/cacert.pem       # The CA certificate
 serial         = $dir/serial           # The current serial number
 crl            = $dir/crl.pem          # The current CRL
 private_key    = $dir/private/cakey.pem# The private key
-RANDFILE       = $dir/private/.rand    # private random number file
 
 x509_extensions        = v3_ca                 # The extensions to add to the cert
 
@@ -71,6 +64,6 @@ emailAddress          = optional
 [ v3_ca ]
 subjectKeyIdentifier=hash
 authorityKeyIdentifier=keyid:always,issuer:always
-basicConstraints = CA:true,pathlen:1
+basicConstraints = critical,CA:true,pathlen:1
 keyUsage = cRLSign, keyCertSign
 issuerAltName=issuer:copy