Uh oh!
There was an error while loading.Please reload this page.
- Notifications
You must be signed in to change notification settings - Fork11
Commit0aaa4bf
Martin Panter
Issue #25940: Set "basic constraints" CA flag in self-signed certificate
This should allow test_ssl to switch from testinghttps://svn.python.org tohttps://self-signed.pythontest.net. The serial number of the certificate wasalso incremented, to stop Firefox from complaining and to keep it unique.Commands used to modify the certificate:openssl x509 < tls/self-signed-cert.pem \ -x509toreq -signkey tls/self-signed-key.pem > req.pemcat <<'CONFIG' > config[x509_extensions]subjectAltName = DNS:self-signed.pythontest.netbasicConstraints = CA:true[ ca ]default_ca = CA_default[ CA_default ]database = index.txtdefault_md = sha1default_days = 3certificate = tls/self-signed-cert.pemprivate_key = tls/self-signed-key.pemserial = serialpolicy = policy_anythingdefault_startdate = 141102180929Zdefault_enddate = 241030180929Z[ policy_anything ]countryName = optionallocalityName = optionalorganizationName = optionalcommonName = optionalCONFIG: > index.txtecho A194F79c0A47CA53 > serialopenssl ca -config config -outdir . -notext \ -batch -extensions x509_extensions -infiles req.pemmv A194F79C0A47CA53.pem tls/self-signed-cert.pem1 parent28ca47a commit0aaa4bf
1 file changed
+6
-6
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | | - | |
| 2 | + | |
3 | 3 | | |
4 | 4 | | |
5 | 5 | | |
| |||
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
11 | | - | |
12 | | - | |
13 | | - | |
14 | | - | |
15 | | - | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
16 | 16 | | |
0 commit comments
Comments
(0)