oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add pkinit glue.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17343 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2006-04-28 16:41:17 +00:00
parent 4ca34ce513
commit c6c3668d19
1 changed files with 51 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
lib/hx509/data/openssl.cnf
View File

@@ -34,6 +34,22 @@ default_md=sha1
policy = policy_match policy = policy_match
certs = . certs = .
[pkinit_client]
database = index.txt
serial = serial
x509_extensions = pkinit_client_cert
default_md=sha1
policy = policy_match
certs = .
[pkinit_kdc]
database = index.txt
serial = serial
x509_extensions = pkinit_kdc_cert
default_md=sha1
policy = policy_match
certs = .
[subca] [subca]
database = index.txt database = index.txt
serial = serial serial = serial
@@ -72,6 +88,41 @@ keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectKeyIdentifier = hash subjectKeyIdentifier = hash
proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:1,policy:text:foo proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:1,policy:text:foo
[pkinitc_princ_name]
realm = EXP:0, GeneralString:EXAMPLE.ORG
principal_name = EXP:1, SEQUENCE:pkinitc_principal_seq
[ pkinit_client_cert ]
basicConstraints=CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectKeyIdentifier = hash
subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:pkinitc_princ_name
[pkinitc_principal_seq]
name_type = EXP:0, INTEGER:1
name_string = EXP:1, SEQUENCE:pkinitc_principals
[pkinitc_principals]
princ1 = GeneralString:bar
[ pkinit_kdc_cert ]
basicConstraints=CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectKeyIdentifier = hash
subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:pkinitkdc_princ_name
[pkinitkdc_princ_name]
realm = EXP:0, GeneralString:EXAMPLE.ORG
principal_name = EXP:1, SEQUENCE:pkinitkdc_principal_seq
[pkinitkdc_principal_seq]
name_type = EXP:0, INTEGER:1
name_string = EXP:1, SEQUENCE:pkinitkdc_principals
[pkinitkdc_principals]
princ1 = GeneralString:krbtgt
princ2 = GeneralString:EXAMPLE.ORG
[ proxy10_cert ] [ proxy10_cert ]
basicConstraints=CA:FALSE basicConstraints=CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment keyUsage = nonRepudiation, digitalSignature, keyEncipherment