Change the "offset too large" message to more generic wording

[openssl.git] / test / CAss.cnf

diff --git a/test/CAss.cnf b/test/CAss.cnf
index b4a7030c91d2e7084b6032e762a82afd44c4fadb..b20a2427603ba9f9507a76251a31706497417e4c 100644 (file)
--- a/test/CAss.cnf
+++ b/test/CAss.cnf
@@ -36,7 +36,7 @@ certs         = $dir/certs            # Where the issued certs are kept
 crl_dir                = $dir/crl              # Where the issued crl are kept
 database       = $dir/index.txt        # database index file.
 #unique_subject        = no                    # Set to 'no' to allow creation of
-                                       # several ctificates with same subject.
+                                       # several certificates with same subject.
 new_certs_dir  = $dir/newcerts         # default place for new certs.
 
 certificate    = $dir/cacert.pem       # The CA certificate
@@ -71,6 +71,6 @@ emailAddress          = optional
 [ v3_ca ]
 subjectKeyIdentifier=hash
 authorityKeyIdentifier=keyid:always,issuer:always
-basicConstraints = CA:true,pathlen:1
+basicConstraints = critical,CA:true,pathlen:1
 keyUsage = cRLSign, keyCertSign
 issuerAltName=issuer:copy