Commit 54565832 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Don't add the TS EKU by default in openssl.cnf because it then

makes certificates genereated by ca, CA.pl etc useless for anything else.
parent f1845cbe
Loading
Loading
Loading
Loading
+1 −1
Original line number Diff line number Diff line
@@ -212,7 +212,7 @@ authorityKeyIdentifier=keyid,issuer
#nsSslServerName

# This is required for TSA certificates.
extendedKeyUsage = critical,timeStamping
# extendedKeyUsage = critical,timeStamping

[ v3_req ]