Hi, I want to create a root ca with a sub ca for test cases. However, it seems openssl ignores the "-extensions v3_ca" parameter, my subca is missing the "CA:true" BasicConstraints field.
Sample openssl calls: openssl req -new -x509 -out ca.crt -keyout ca.key -nodes -subj "/CN=rootca/" openssl req -nodes -new -extensions v3_ca -subj "/CN=subca/" \ -keyout subca.key -out subca.csr openssl x509 -req -extensions v3_ca -CA ca.crt -CAkey ca.key -set_serial 1234 \ -in subca.csr -out subca.crt subca.crt has no CA:true field. What am I doing wrong here? Or is this a bug somehow? (tried with openssl 1.0.0d and current cvs code) -- Hanno Böck mail/jabber: ha...@hboeck.de GPG: BBB51E42 http://www.hboeck.de/ JETZT zu Ökostrom wechseln: http://atomausstieg-selber-machen.de
signature.asc
Description: PGP signature
