Include TA in checks/callback with partial chains.
[openssl.git] / test / Uss.cnf
index c89692d..98b2e05 100644 (file)
@@ -7,7 +7,7 @@ RANDFILE                = ./.rnd
 
 ####################################################################
 [ req ]
-default_bits           = 512
+default_bits           = 1024
 default_keyfile        = keySS.pem
 distinguished_name     = req_distinguished_name
 encrypt_rsa_key                = no
@@ -26,3 +26,11 @@ organizationName_value          = Dodgy Brothers
 
 1.commonName                   = Common Name (eg, YOUR name)
 1.commonName_value             = Brother 2
+
+[ v3_ee ]
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer:always
+basicConstraints = CA:false
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+issuerAltName=issuer:copy
+