From a52db0479d2c9db1d15ff0076a8a7dd8824a3950 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Wed, 26 Apr 2006 13:31:26 +0000
Subject: [PATCH] Add definition for proxy certs

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17254 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/hx509/data/openssl.cnf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/lib/hx509/data/openssl.cnf b/lib/hx509/data/openssl.cnf
index 0bf6ed78c..d1841e445 100644
--- a/lib/hx509/data/openssl.cnf
+++ b/lib/hx509/data/openssl.cnf
@@ -66,6 +66,12 @@ basicConstraints=CA:FALSE
 keyUsage = nonRepudiation, keyEncipherment
 subjectKeyIdentifier	= hash
 
+[ proxy_cert ]
+basicConstraints=CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+subjectKeyIdentifier	= hash
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:1,policy:text:foo
+
 [ usr_cert_ds ]
 basicConstraints=CA:FALSE
 keyUsage = nonRepudiation, digitalSignature