From e983253ecc85aaa8a51ae562dc1805132d339781 Mon Sep 17 00:00:00 2001 From: Aldo Cortesi Date: Fri, 18 Mar 2011 09:04:49 +1300 Subject: Docs, minor cert tweaks. --- libmproxy/resources/ca.cnf | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'libmproxy/resources') diff --git a/libmproxy/resources/ca.cnf b/libmproxy/resources/ca.cnf index e46bb08f..c65c66c8 100644 --- a/libmproxy/resources/ca.cnf +++ b/libmproxy/resources/ca.cnf @@ -5,24 +5,27 @@ x509_extensions = v3_ca req_extensions = v3_ca_req [ req_distinguished_name ] -organizationName = mitmproxy -commonName = Dummy CA +organizationName = mitmproxy +commonName = mitmproxy [ v3_ca ] subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always,issuer basicConstraints = critical,CA:true keyUsage = cRLSign, keyCertSign +extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC nsCertType = sslCA [ v3_ca_req ] basicConstraints = critical,CA:true keyUsage = cRLSign, keyCertSign +extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC nsCertType = sslCA [ v3_cert ] basicConstraints = CA:false keyUsage = nonRepudiation, digitalSignature, keyEncipherment +extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC nsCertType = server subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always,issuer @@ -30,4 +33,5 @@ authorityKeyIdentifier=keyid:always,issuer [ v3_cert_req ] basicConstraints = CA:false keyUsage = nonRepudiation, digitalSignature, keyEncipherment +extendedKeyUsage=serverAuth,clientAuth,emailProtection,timeStamping,msCodeInd,msCodeCom,msCTLSign,msSGC,msEFS,nsSGC nsCertType = server -- cgit v1.2.3