From b05b743c4bdfc599bb2dacd0810f7f9eec97488e Mon Sep 17 00:00:00 2001 From: Someone Date: Thu, 5 Feb 2015 01:08:59 +0100 Subject: [PATCH] Add CRL-URL into openssl.cnf --- openssl.cnf | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/openssl.cnf b/openssl.cnf index 4c6604a..fee123c 100644 --- a/openssl.cnf +++ b/openssl.cnf @@ -14,8 +14,6 @@ default_crl_days = 365 # how long before next CRL default_md = sha512 # use public key default MD preserve = no # keep passed DN ordering -x509_extensions = ca_extensions # The extensions to add to the cert - unique_subject = no email_in_dn = no # Don't concat the email in the DN copy_extensions = copyall # Required to copy SANs from CSR to cert @@ -26,9 +24,13 @@ database = $dir/index.txt serial = $dir/serial certificate = $dir/ca.crt -policy = policy_match +x509_extensions = ca_extensions +policy = ca_match + +[ ca_extensions ] +crlDistributionPoints=URI:http://www.somenet.org/somenet.crl -[ policy_match ] +[ ca_match ] organizationName = match countryName = optional stateOrProvinceName = optional -- 2.43.0