Skip to content

Commit b43b345

Browse files
committed
fix: add cRLSign usage to openssl root CA
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
1 parent 0317b3a commit b43b345

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

lib/Handler/CertificateEngine/OpenSslHandler.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -247,7 +247,7 @@ private function buildCaCertificateConfig(): array {
247247
],
248248
'v3_ca' => [
249249
'basicConstraints' => 'critical, CA:TRUE, pathlen:1',
250-
'keyUsage' => 'critical, digitalSignature, keyCertSign',
250+
'keyUsage' => 'critical, digitalSignature, keyCertSign, cRLSign',
251251
'extendedKeyUsage' => 'clientAuth, emailProtection',
252252
'subjectAltName' => $this->getSubjectAltNames(),
253253
'authorityKeyIdentifier' => 'keyid',

0 commit comments

Comments
 (0)