daohualiuxiang
/
node
mirror of https://github.com/nodejs/node.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
node/test/fixtures/keys/ca1.cnf

24 lines
609 B
Plaintext
Raw Normal View History

Fix CNs for agent keys; can't be the same as CA's CN Also add makefile for easy tweaking.
2010-12-08 08:34:26 +08:00
[ req ]
default_bits = 1024
New keys, agent1-cert.pem was expired
2011-02-10 10:10:55 +08:00
days = 999
Fix CNs for agent keys; can't be the same as CA's CN Also add makefile for easy tweaking.
2010-12-08 08:34:26 +08:00
distinguished_name = req_distinguished_name
attributes = req_attributes
prompt = no
output_password = password
tls: use `SSL_set_cert_cb` for async SNI/OCSP Do not enable ClientHello parser for async SNI/OCSP. Use new OpenSSL-1.0.2's API `SSL_set_cert_cb` to pause the handshake process and load the cert/OCSP response asynchronously. Hopefuly this will make whole async SNI/OCSP process much faster and will eventually let us remove the ClientHello parser itself (which is currently used only for async session, see #1462 for the discussion of removing it). NOTE: Ported our code to `SSL_CTX_add1_chain_cert` to use `SSL_CTX_get0_chain_certs` in `CertCbDone`. Test provided for this feature. Fix: https://github.com/iojs/io.js/issues/1423 PR-URL: https://github.com/iojs/io.js/pull/1464 Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>
2015-04-18 16:19:23 +08:00
x509_extensions = v3_ca
Fix CNs for agent keys; can't be the same as CA's CN Also add makefile for easy tweaking.
2010-12-08 08:34:26 +08:00
[ req_distinguished_name ]
C = US
ST = CA
L = SF
O = Joyent
OU = Node.js
CN = ca1
emailAddress = ry@tinyclouds.org
[ req_attributes ]
challengePassword = A challenge password
tls: use `SSL_set_cert_cb` for async SNI/OCSP Do not enable ClientHello parser for async SNI/OCSP. Use new OpenSSL-1.0.2's API `SSL_set_cert_cb` to pause the handshake process and load the cert/OCSP response asynchronously. Hopefuly this will make whole async SNI/OCSP process much faster and will eventually let us remove the ClientHello parser itself (which is currently used only for async session, see #1462 for the discussion of removing it). NOTE: Ported our code to `SSL_CTX_add1_chain_cert` to use `SSL_CTX_get0_chain_certs` in `CertCbDone`. Test provided for this feature. Fix: https://github.com/iojs/io.js/issues/1423 PR-URL: https://github.com/iojs/io.js/pull/1464 Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>
2015-04-18 16:19:23 +08:00
[ v3_ca ]
basicConstraints = CA:TRUE