Results 1 to 2 of 2

Thread: openssl.conf basicConstraints not picked up in generated CA

  1. #1

    Default openssl.conf basicConstraints not picked up in generated CA

    Hi all, sorry if this is a dup - didn't see my first post.

    My openssl.cnf defines v3_ca basic constraints as follows:

    basicConstraints = CA:true,pathlen:1

    When I run CA.sh -newca, the generated cert does not reflect this:

    BasicConstraints:[
    CA:false
    PathLen: undefined
    ]

    It should read:

    BasicConstraints:[
    CA:true
    PathLen: 1
    ]

    Seems the v3_ca extensions section in my openssl.cnf isn't getting picked up - weird because everything else I modified is.

    Any suggestions? Thanks in advance.

  2. #2
    Join Date
    Nov 2009
    Location
    West Virginia Sector 13
    Posts
    15,646

    Default Re: openssl.conf basicConstraints not picked up in generated CA

    Did you restart the process after changing the config?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •