Revert CDP syntax to be OpenSSL 0.9.x compatible

12 years ago · 94b5e8ba7b
parent 8474346ed9
commit 94b5e8ba7b
1 changed files with 1 additions and 10 deletions
--- a/extra/pki/x509v3ca.cnf
+++ b/extra/pki/x509v3ca.cnf
@ -13,7 +13,7 @@ basicConstraints                = CA:FALSE
 subjectKeyIdentifier            = hash
 authorityKeyIdentifier          = keyid:always,issuer:always
 authorityInfoAccess             = OCSP;URI:http://daniel.roe.ch/test/ocsp
-crlDistributionPoints           = URI:http://daniel.roe.ch/test/crl1,crl2
+crlDistributionPoints           = URI:http://daniel.roe.ch/test/crl
 subjectAltName                  = dirName:s1n,DNS:daniel.roe.ch,IP:127.0.0.1,email:daniel@roe.ch,DNS:www.roe.ch,DNS:*.roe.ch

 [ s1n ]
@ -21,12 +21,3 @@ C=CH
 O=SSLsplit Test Certificate
 CN=daniel.roe.ch

-[ crl2 ]
-fullname                        = URI:http://daniel.roe.ch/test/crl2
-CRLissuer                       = URI:dirName:crl2issuer
-reasons                         = keyCompromise, CACompromise
-
-[ crl2issuer ]
-C=CH
-O=SSLsplit Root CA
-CN=SSLsplit Root CA