From 80238e2487031b2dc45927c2314c5bc0fd39cb1d Mon Sep 17 00:00:00 2001 From: Chad Loder Date: Wed, 28 Mar 2007 20:57:31 +0000 Subject: Add the cRLSign bit by default, so that certs generated using this file will be able to sign CRLs. OK reyk, hshoexer, millert --- lib/libssl/x509v3.cnf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lib/libssl') diff --git a/lib/libssl/x509v3.cnf b/lib/libssl/x509v3.cnf index e4300886710..5835534b965 100644 --- a/lib/libssl/x509v3.cnf +++ b/lib/libssl/x509v3.cnf @@ -1,6 +1,6 @@ # default settings CERTPATHLEN = 1 -CERTUSAGE = digitalSignature,keyCertSign +CERTUSAGE = digitalSignature,keyCertSign,cRLSign CERTIP = 0.0.0.0 CERTFQDN = nohost.nodomain -- cgit v1.2.3