Commit 2397de7d authored by ale's avatar ale

allow specifying nsCertType in config

parent ad5c70b1
......@@ -169,7 +169,7 @@ class CA(object):
csr_file = os.path.join(tmpdir, '%s.csr' % cert.name)
conf_file = os.path.join(tmpdir, '%s.conf' % cert.name)
ext_file = os.path.join(tmpdir, '%s-ext.conf' % cert.name)
conf = {}
conf = {'usage': 'client, server'}
conf.update(self.config)
conf['cn'] = cert.cn
conf['days'] = cert.days or self.config['default_days']
......
basicConstraints = CA:false
nsCertType = client, server
nsCertType = %(usage)s
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage = clientAuth, serverAuth
subjectKeyIdentifier = hash
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment