X-Git-Url: https://git.enpas.org/?a=blobdiff_plain;f=util%2Fopenssl.lua;h=39fe99d6abf3013112259fda1e876e8ed894ee1c;hb=533fc1fa57ce10fc0821f8edaeb247f2710a543c;hp=ef3fba9616acba5c96c78b989d4cc78a4e221171;hpb=b11cb25a07602b016eedf79d238a8ce5e9b3c161;p=prosody.git diff --git a/util/openssl.lua b/util/openssl.lua index ef3fba96..39fe99d6 100644 --- a/util/openssl.lua +++ b/util/openssl.lua @@ -18,8 +18,8 @@ function config.new() return setmetatable({ req = { distinguished_name = "distinguished_name", - req_extensions = "v3_extensions", - x509_extensions = "v3_extensions", + req_extensions = "certrequest", + x509_extensions = "selfsigned", prompt = "no", }, distinguished_name = { @@ -31,12 +31,16 @@ function config.new() commonName = "example.com", emailAddress = "xmpp@example.com", }, - v3_extensions = { + certrequest = { basicConstraints = "CA:FALSE", keyUsage = "digitalSignature,keyEncipherment", extendedKeyUsage = "serverAuth,clientAuth", subjectAltName = "@subject_alternative_name", }, + selfsigned = { + basicConstraints = "CA:TRUE", + subjectAltName = "@subject_alternative_name", + }, subject_alternative_name = { DNS = {}, otherName = {},