Skip to content

Commit ab6d9e3

Browse files
committed
refactor: Simplify test certificate configuration
1 parent 8f7e2df commit ab6d9e3

File tree

1 file changed

+10
-11
lines changed

1 file changed

+10
-11
lines changed

Diff for: src/test/resources/alice.cnf

+10-11
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,7 @@
11
[ req ]
22
default_bits = 4096
33
distinguished_name = req_distinguished_name
4+
x509_extensions = x509_ext
45
string_mask = utf8only
56

67
[ req_distinguished_name ]
@@ -21,15 +22,13 @@ emailAddress = Email Address
2122
emailAddress_default = [email protected]
2223
emailAddress_max = 64
2324

24-
[ usr_cert ]
25-
subjectKeyIdentifier=hash
26-
authorityKeyIdentifier=keyid,issuer
27-
subjectAltName=email:move
25+
# Section x509_ext is used when generating a self-signed certificate. I.e., openssl req -x509 ...
26+
[ x509_ext ]
2827

29-
[ smime ]
30-
basicConstraints = CA:FALSE
31-
keyUsage = nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment
32-
extendedKeyUsage = emailProtection
33-
subjectKeyIdentifier = hash
34-
authorityKeyIdentifier = keyid:always, issuer
35-
subjectAltName = email:copy
28+
subjectKeyIdentifier = hash
29+
authorityKeyIdentifier = keyid,issuer
30+
31+
basicConstraints = CA:FALSE
32+
keyUsage = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
33+
extendedKeyUsage = clientAuth, emailProtection
34+
#subjectAltName = email:copy

0 commit comments

Comments
 (0)