Don't add the TS EKU by default in openssl.cnf because it then

makes certificates genereated by ca, CA.pl etc useless for anything else.

Don't add the TS EKU by default in openssl.cnf because it then
makes certificates genereated by ca, CA.pl etc useless for anything else.
54565832 · Dr. Stephen Henson · f1845cbe · 54565832
隐藏空白更改
内联并排

Showing with 1 addition and 1 deletion

apps/openssl.cnf apps/openssl.cnf +1 -1

未找到文件。
--- a/apps/openssl.cnf
+++ b/apps/openssl.cnf
@@ -212,7 +212,7 @@ authorityKeyIdentifier=keyid,issuer
 #nsSslServerName

 # This is required for TSA certificates.
-extendedKeyUsage = critical,timeStamping
+# extendedKeyUsage = critical,timeStamping

 [ v3_req ]