make various test CA certs RFC 5280 compliant w.r.t. X509 extensions
[openssl.git] / test / v3_ca_exts.cnf
1 basicConstraints = critical, CA:true
2 keyUsage = cRLSign, keyCertSign
3 subjectKeyIdentifier = hash
4 authorityKeyIdentifier = keyid:always
5