More X509 V3 stuff. Add support for extensions in the 'req' application
[openssl.git] / apps / openssl.cnf
index c07083566fbe8e552ffc0be4b5794129d3cf034d..fbc328fad41ef9c218788fd9198442d4776b20ad 100644 (file)
@@ -63,6 +63,7 @@ default_bits          = 1024
 default_keyfile        = privkey.pem
 distinguished_name     = req_distinguished_name
 attributes             = req_attributes
+x509_extensions        = v3_ca # The extentions to add to the cert
 
 [ req_distinguished_name ]
 countryName                    = Country Name (2 letter code)
@@ -117,3 +118,11 @@ nsCertType                 = 0x40
 #nsCertExt
 #nsDataType
 
+[ v3_ca]
+
+# Extensions for a typical CA
+
+basicConstraints = CA:true
+keyUsage = cRLSign, keyCertSign
+
+