CVSROOT: /cvs Module name: src Changes by: j...@cvs.openbsd.org 2015/11/02 05:01:28
Modified files:
usr.sbin/ikectl: ikeca.c ikeca.cnf
Log message:
sign csrs with openssl ca instead of x509 -req
This way openssl will add valid signed certs to the index file
which is required to use the builtin openssl OCSP server.
This change requires installing a new ikeca.cnf or updating
the default cnf files with equivalent sections.
Requested by and ok reyk@
