SSL Module - Allow the CA to sign client certs

This commit is contained in:
Mike Reeves
2018-07-16 12:36:16 -04:00
parent 0b956c9017
commit 853b6768c4

View File

@@ -25,7 +25,7 @@ pki_private_key:
- ST: Utah
- L: Salt Lake City
- basicConstraints: "critical CA:true"
- keyUsage: "critical cRLSign, keyCertSign"
- keyUsage: "critical cRLSign, keyCertSign, serverAuth, clientAuth"
- subjectKeyIdentifier: hash
- authorityKeyIdentifier: keyid,issuer:always
- days_valid: 3650