diff --git a/ssl/xpextensions b/ssl/xpextensions index d40c469..b949a14 100644 --- a/ssl/xpextensions +++ b/ssl/xpextensions @@ -10,6 +10,11 @@ crlDistributionPoints = URI:http://www.example.com/example_ca.crl [ xpserver_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.1 crlDistributionPoints = URI:http://www.example.com/example_ca.crl + +# This is the 'Trust Override Disabled - STRICT' policy. +#certificatePolicies = 1.3.6.1.4.1.40808.1.3.1 +# This is the 'Trust Override Disabled - TOFU' policy. + certificatePolicies = 1.3.6.1.4.1.40808.1.3.2 #