X-Git-Url: https://git.openssl.org/gitweb/?p=openssl.git;a=blobdiff_plain;f=demos%2Fcerts%2Fapps%2Fapps.cnf;h=a5da21678e246f700e56e2251e5b9feb8f7fb773;hp=99cb398742a48f1d93684da8fc90d0efe6369725;hb=ef6b34bec2adf7d62a91cb8901252bd95301a3d5;hpb=becfdb995baa14d1db3ebed7991545a15d6040d1;ds=sidebyside

diff --git a/demos/certs/apps/apps.cnf b/demos/certs/apps/apps.cnf
index 99cb398742..a5da21678e 100644
--- a/demos/certs/apps/apps.cnf
+++ b/demos/certs/apps/apps.cnf
@@ -39,6 +39,17 @@ keyUsage=critical, nonRepudiation, digitalSignature, keyEncipherment
 # This will be displayed in Netscape's comment listbox.
 nsComment			= "OpenSSL Generated Certificate"
 
+[ ec_cert ]
+
+# These extensions are added when 'ca' signs a request for an end entity
+# certificate
+
+basicConstraints=critical, CA:FALSE
+keyUsage=critical, nonRepudiation, digitalSignature, keyAgreement
+
+# This will be displayed in Netscape's comment listbox.
+nsComment			= "OpenSSL Generated Certificate"
+
 # PKIX recommendations harmless if included in all certificates.
 subjectKeyIdentifier=hash
 authorityKeyIdentifier=keyid