aboutsummaryrefslogtreecommitdiffstats
path: root/tests/certs/generate
diff options
context:
space:
mode:
authorGuilhem Moulin <guilhem@debian.org>2025-04-26 18:24:46 +0200
committerGuilhem Moulin <guilhem@debian.org>2025-04-26 18:24:46 +0200
commit822f251cd94468a2ab305f46078c9f3e38b68b5f (patch)
tree2ec291885cc3db4c1f15445557b0f57c223f6931 /tests/certs/generate
parent6efe479ce30432045a099c4624455f152fa19ba3 (diff)
parentd3bcc2e368e7399af664812cbd67df1dc827d58b (diff)
Merge tag 'v0.5.8' into debian/latest
Release version 0.5.8
Diffstat (limited to 'tests/certs/generate')
-rwxr-xr-xtests/certs/generate7
1 files changed, 6 insertions, 1 deletions
diff --git a/tests/certs/generate b/tests/certs/generate
index 8e9c451..f449764 100755
--- a/tests/certs/generate
+++ b/tests/certs/generate
@@ -22,7 +22,12 @@ genpkey() {
# generate CA (we intentionally throw away the private key and serial
# file to avoid reuse)
genpkey "$cadir/ca.key" -algorithm RSA
-openssl req -new -x509 -rand /dev/urandom -subj "/OU=$OU/CN=Fake Root CA" -key "$cadir/ca.key" -out ./ca.crt
+openssl req -new -x509 -rand /dev/urandom \
+ -subj "/OU=$OU/CN=Fake Root CA" \
+ -addext subjectKeyIdentifier="hash" \
+ -addext authorityKeyIdentifier="keyid:always,issuer" \
+ -addext basicConstraints="critical,CA:TRUE" \
+ -key "$cadir/ca.key" -out ./ca.crt
SERIAL=1
new() {