aboutsummaryrefslogtreecommitdiffstats
path: root/libmproxy/resources
diff options
context:
space:
mode:
authorAldo Cortesi <aldo@nullcube.com>2011-03-18 09:04:49 +1300
committerAldo Cortesi <aldo@nullcube.com>2011-03-18 09:04:49 +1300
commite983253ecc85aaa8a51ae562dc1805132d339781 (patch)
tree5f360ca325d643f4496373ca929bc9b40a520a25 /libmproxy/resources
parent2af6dcf6f7c64f2a14a26c11975d103ba5d39326 (diff)
downloadmitmproxy-e983253ecc85aaa8a51ae562dc1805132d339781.tar.gz
mitmproxy-e983253ecc85aaa8a51ae562dc1805132d339781.tar.bz2
mitmproxy-e983253ecc85aaa8a51ae562dc1805132d339781.zip
Docs, minor cert tweaks.
Diffstat (limited to 'libmproxy/resources')
-rw-r--r--libmproxy/resources/ca.cnf8
1 files changed, 6 insertions, 2 deletions
diff --git a/libmproxy/resources/ca.cnf b/libmproxy/resources/ca.cnf
index e46bb08f..c65c66c8 100644
--- a/libmproxy/resources/ca.cnf
+++ b/libmproxy/resources/ca.cnf
@@ -5,24 +5,27 @@ x509_extensions = v3_ca
req_extensions = v3_ca_req
[ req_distinguished_name ]
-organizationName = mitmproxy
-commonName = Dummy CA
+organizationName = mitmproxy
+commonName = mitmproxy
[ v3_ca ]
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer
basicConstraints = critical,CA:true
keyUsage = cRLSign, keyCertSign
+extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC
nsCertType = sslCA
[ v3_ca_req ]
basicConstraints = critical,CA:true
keyUsage = cRLSign, keyCertSign
+extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC
nsCertType = sslCA
[ v3_cert ]
basicConstraints = CA:false
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC
nsCertType = server
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid:always,issuer
@@ -30,4 +33,5 @@ authorityKeyIdentifier=keyid:always,issuer
[ v3_cert_req ]
basicConstraints = CA:false
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC
nsCertType = server