mirror of
https://github.com/nodejs/node.git
synced 2024-12-01 16:10:02 +01:00
ec6b7939eb
agent6 was the only cert that had a chain (an intermediate certificate), and there were no non-RSA certs other than a single self-signed one. This makes it impossible to test cert-chain scenarios with multiple identities which require chains to prove chain completion, and multi-algorithm because OpenSSL doesn't support multiple identities unless they are multi-algorithm. PFX files were also missing for most identities, making it difficult to test multi-PFX and PFX interactions with cert-chain+key and CA options. New server cert chains: - ECC: ca5 signs ca6 signs ec10, CN=agent10.example.com - RSA: ca2 signs ca4 signs agent10, CN=agent10.example.com PFX added for: - agent6 - agent10 - ec10 All pem and pfx regenerated from scratch to test that the Makefile is actually working as intended. PR-URL: https://github.com/nodejs/node/pull/24374 Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com> Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl> Reviewed-By: Franziska Hinkelmann <franziska.hinkelmann@gmail.com>
36 lines
801 B
INI
36 lines
801 B
INI
[ ca ]
|
|
default_ca = CA_default
|
|
|
|
[ CA_default ]
|
|
serial = ca5-serial
|
|
crl = ca5-crl.pem
|
|
database = ca5-database.txt
|
|
name_opt = CA_default
|
|
cert_opt = CA_default
|
|
default_crl_days = 999
|
|
default_md = sha512
|
|
x509_extensions = v3_ca
|
|
|
|
|
|
[ req ]
|
|
days = 9999
|
|
distinguished_name = req_distinguished_name
|
|
attributes = req_attributes
|
|
prompt = no
|
|
output_password = password
|
|
|
|
[ req_distinguished_name ]
|
|
C = US
|
|
ST = CA
|
|
L = SF
|
|
O = The Node.js Foundation
|
|
OU = Node.js
|
|
CN = ca5
|
|
emailAddress = ca5@example.org
|
|
|
|
[ req_attributes ]
|
|
challengePassword = A challenge password
|
|
|
|
[ v3_ca ]
|
|
basicConstraints = CA:TRUE
|