[ v3_req ] nsCertType = server,client basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment extendedKeyUsage = OCSPSigning
I am trying to create SSL cert signed by the CA and want OCSPsigning extended key usage and it turns off SSL server and SSL client and of course Mozilla has an issue even though I have the nsCertType set. I have tried all sorts of things to sign the car openssl ca -out certout -in csr -batch -config myconfig -extensions v3_req -- View this message in context: http://openssl.6102.n7.nabble.com/OCSPsigning-added-sets-SSL-client-No-and-SSL-server-No-tp46313.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
