adding intermediate CA signing capability.

2024-10-08 05:49:05 +00:00
parent 5c89e73128
commit 42b40660ce
4 changed files with 34 additions and 3 deletions
--- a/pki.cnf
+++ b/pki.cnf
@@ -0,0 +1,5 @@
+[v3_intermediate_ca]
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid:always,issuer
+basicConstraints = critical, CA:true, pathlen:0
+keyUsage = critical, digitalSignature, cRLSign, keyCertSign