Make CA.pl script use CA extensions when creating a root CA.
authorDr. Stephen Henson <steve@openssl.org>
Wed, 30 Nov 2005 18:31:36 +0000 (18:31 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Wed, 30 Nov 2005 18:31:36 +0000 (18:31 +0000)
apps/CA.pl.in

index 8ef8ac1c83c368d8391a006fdb4b50278186462f..d97f0ce9c9a9a810a3132ffc074fe7f9194d5b5f 100644 (file)
@@ -113,6 +113,7 @@ foreach (@ARGV) {
                    system ("$CA -create_serial " .
                        "-out ${CATOP}/$CACERT $CADAYS -batch " . 
                        "-keyfile ${CATOP}/private/$CAKEY -selfsign " .
+                       "-extensions v3_ca" .
                        "-infiles ${CATOP}/$CAREQ ");
                    $RET=$?;
                }