RT3809: basicConstraints is critical
[openssl.git] / test / CAss.cnf
index 336e82fd52ed4510b843b90623f3ea4e057d29f5..b20a2427603ba9f9507a76251a31706497417e4c 100644 (file)
@@ -71,6 +71,6 @@ emailAddress          = optional
 [ v3_ca ]
 subjectKeyIdentifier=hash
 authorityKeyIdentifier=keyid:always,issuer:always
-basicConstraints = CA:true,pathlen:1
+basicConstraints = critical,CA:true,pathlen:1
 keyUsage = cRLSign, keyCertSign
 issuerAltName=issuer:copy