diff options
| author | Christina Fu <cfu@redhat.com> | 2014-09-25 09:03:58 -0700 |
|---|---|---|
| committer | Christina Fu <cfu@redhat.com> | 2014-09-25 10:01:40 -0700 |
| commit | ee33bb2a90a183b9d5552c6ac193e9d8958a3974 (patch) | |
| tree | a9de42fa15937b982128eb2f032daa47ebaa4872 /base/server/etc/default.cfg | |
| parent | 247b30faec1b85c66979fcdffdfad04a29c87b11 (diff) | |
| download | pki-ee33bb2a90a183b9d5552c6ac193e9d8958a3974.tar.gz pki-ee33bb2a90a183b9d5552c6ac193e9d8958a3974.tar.xz pki-ee33bb2a90a183b9d5552c6ac193e9d8958a3974.zip | |
ticket #1110 pkispawn (configuration) does not provide CA extensions in subordinate certificate signing requests (CSR)
Diffstat (limited to 'base/server/etc/default.cfg')
| -rw-r--r-- | base/server/etc/default.cfg | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/base/server/etc/default.cfg b/base/server/etc/default.cfg index 9047e6e7c..686cc59f9 100644 --- a/base/server/etc/default.cfg +++ b/base/server/etc/default.cfg @@ -347,6 +347,11 @@ pki_ca_signing_signing_algorithm=SHA256withRSA pki_ca_signing_subject_dn=cn=CA Signing Certificate,o=%(pki_security_domain_name)s pki_ca_signing_token=Internal Key Storage Token pki_external=False +pki_req_ext_add=False +# MS subca request ext data +pki_req_ext_oid=1.3.6.1.4.1.311.20.2 +pki_req_ext_critical=False +pki_req_ext_data=1E0A00530075006200430041 pki_external_csr_path=%(pki_instance_configuration_path)s/ca_signing.csr pki_external_step_two=False pki_external_ca_cert_chain_path=%(pki_instance_configuration_path)s/external_ca_chain.cert |