From 4711c385c8794193641e66f219be2183dc4ac92a Mon Sep 17 00:00:00 2001 From: simon Date: Thu, 10 Dec 2020 16:59:48 +0100 Subject: [PATCH] chore: new xpextensions for auth --- ssl/xpextensions | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/ssl/xpextensions b/ssl/xpextensions index d40c469..b949a14 100644 --- a/ssl/xpextensions +++ b/ssl/xpextensions @@ -10,6 +10,11 @@ crlDistributionPoints = URI:http://www.example.com/example_ca.crl [ xpserver_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.1 crlDistributionPoints = URI:http://www.example.com/example_ca.crl + +# This is the 'Trust Override Disabled - STRICT' policy. +#certificatePolicies = 1.3.6.1.4.1.40808.1.3.1 +# This is the 'Trust Override Disabled - TOFU' policy. + certificatePolicies = 1.3.6.1.4.1.40808.1.3.2 #