Hi all, sorry if this is a dup - didn’t see my first post.
My openssl.cnf defines v3_ca basic constraints as follows:
basicConstraints = CA:true,pathlen:1
When I run CA.sh -newca, the generated cert does not reflect this:
BasicConstraints:
CA:false
PathLen: undefined
]
It should read:
BasicConstraints:
CA:true
PathLen: 1
]
Seems the v3_ca extensions section in my openssl.cnf isn’t getting picked up - weird because everything else I modified is.
Any suggestions? Thanks in advance.