On Sat, Jun 29, 2002, Kiyoshi Watanabe wrote: > > Hi, would somebody tell me what does the following sentence mean ? > Does this tell that self-signed certificate does not include > the keyUsage extension? > > Kiyoshi Watanabe > > -----openssl.cnf---- > > # Key usage: this is typical for a CA certificate. However since it > will > # prevent it being used as an test self-signed certificate it is best > # left out by default. > # keyUsage = cRLSign, keyCertSign
Initially that line was included. However the result would be that a self signed certificate could not be used for certain purposes (SSL server for example) and would be (correctly) rejected by certain software (Netscape and now OpenSSL itself). So it was commented out in the default config file. Steve. -- Dr. Stephen Henson [EMAIL PROTECTED] OpenSSL Project http://www.openssl.org/~steve/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
