mirror of
https://github.com/clearlinux/swupd-client.git
synced 2026-09-03 20:21:29 +00:00
Otavio Pontes
a3a58b7319
Test if certificates with Authority Information Access property set as critical aren't used to validate swupd content. Signed-off-by: Otavio Pontes <otavio.pontes@intel.com>
22 lines
492 B
INI
22 lines
492 B
INI
[ ca ]
|
|
default_ca = myca
|
|
|
|
[ req ]
|
|
distinguished_name = myca_policy
|
|
x509_extensions = ca_extensions
|
|
|
|
[ myca_policy ]
|
|
commonName = supplied
|
|
stateOrProvinceName = supplied
|
|
countryName = supplied
|
|
emailAddress = optional
|
|
organizationName = supplied
|
|
organizationalUnitName = optional
|
|
|
|
[ca_extensions]
|
|
keyUsage = digitalSignature,keyCertSign,cRLSign
|
|
extendedKeyUsage = codeSigning
|
|
basicConstraints = critical,CA:FALSE
|
|
subjectKeyIdentifier = hash
|
|
authorityInfoAccess = OCSP;URI:http://127.0.0.1:8080
|