2017-05-05 18:56:12 +02:00
|
|
|
[cli-rsa]
|
|
|
|
|
subjectKeyIdentifier=hash
|
|
|
|
|
authorityKeyIdentifier=keyid:always,issuer:always
|
|
|
|
|
basicConstraints = CA:false
|
2017-08-21 13:55:36 +01:00
|
|
|
authorityInfoAccess = @ocsp_info
|
|
|
|
|
|
|
|
|
|
[ocsp_info]
|
|
|
|
|
caIssuers;URI.0 = http://test.com/ca.cert
|
|
|
|
|
OCSP;URI.0 = http://localhost
|
|
|
|
|
|
|
|
|
|
[ocsp]
|
|
|
|
|
# Extension for OCSP signing certificates ('man ocsp').
|
|
|
|
|
basicConstraints = CA:FALSE
|
|
|
|
|
subjectKeyIdentifier = hash
|
|
|
|
|
authorityKeyIdentifier = keyid,issuer
|
|
|
|
|
keyUsage = critical, digitalSignature
|
|
|
|
|
extendedKeyUsage = critical, OCSPSigning
|
|
|
|
|
noCheck = yes
|
|
|
|
|
|
|
|
|
|
[ocsp-nocheck]
|
|
|
|
|
noCheck = yes
|
